Hello! I'm currently having trouble setting up OctoberCMS on my new host, and while it installs fine, whenever I try and edit a file, I get a load of html in a flash pop-up message (as described here)

The solution for many people was to disable mod_security, however I also know that this could cause some security loop holes. So my questions are, A) Does OctoberCMS need mod_sec to stay secure? and B) if it does, what rules should I white list in order to keep both October and mod_sec running?

Just contacted my hosting provider, they generously looked into the issue. They disabled ModSecurity rules 350147 and 350148, and now it appears to work fine. Hope this helps anyone else with this problem. Will update if anything changes

Any more follow up on this? Those rules seem to shorten the length of the popup, but I still can't save a blog.

My host just told me to turn it off. I have tried. Anyone got some updated code that works?

Psharp said:

Any more follow up on this? Those rules seem to shorten the length of the popup, but I still can't save a blog.

My host just told me to turn it off. I have tried. Anyone got some updated code that works?

Unfortunately no. I've continued to work with my host on the issue, and from what it appears they have been turning on and off different modsec settings to get it to work. Its kinda sporadic, but at this point I figure they must have done something in the backend of my account.

I plan on setting up a VPS or similar so that I can manually control and troubleshoot these settings. It is unfortunately the curse of cheap shared hosting, being at the mercy of unknown sys admins.

We had to disable rule 949110