This forum has moved to a new location and is in read-only mode. Please visit talk.octobercms.com to access the new location.

ejwill
ejwill

Hello,

I've been trialling the use of October CMS but I've run into an issue that I don't fully understand and is hindering me in using October any further. The CMS will run fine for a while, but after a few saves of files mod_security starts to panic. On my service providers host, when it panics, I get locked out of my site for at least an hour. I'm wondering if there is anything wrong with the way the CMS works or if mod_security is reporting a false positive. The error logs are as follows:

350147 Atomicorp.com UNSUPPORTED DELAYED Rules: Potentially Untrusted Web Content Detected
1 somesite.co.uk/backend/cms \"$MS_DATA\"

340147 Atomicorp.com UNSUPPORTED DELAYED Rules: Potential Cross Site Scripting Attack
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"
1 somesite.co.uk/backend/cms \"$MS_DATA\"

350147 Atomicorp.com UNSUPPORTED DELAYED Rules: Potentially Untrusted Web Content Detected
1 somesite.co.uk/backend/cms \"$MS_DATA\"

I don't know enough about mod_security or the finer points of what october is attempting to do at this point. It tends to go wrong soon after I produce an error on a page and try to save it.

Any assistance would greatly be appreciated, I've enjoyed what i've used and seen so far.

Mennax
Mennax

same problem. I solved it only by deactivating rule 350147

1-2 of 2

You cannot edit posts or make replies: the forum has moved to talk.octobercms.com.