Error 406

hello
I have had problems with the error 406 with FC.

I have add in my .htaccess the order to inhibit the security check and it was working.

I have a new site with a new provider. the htaccess was not installed.

I've got the 406 error after updating an article in FC.

After the error 406 I got some information from the provider which may perhaps help to find the origin of the problem :

the message sent by the provider :

Je viens de débloquer votre IP et j'ai trouvé la cause, cela viens bien du mod_security qui prend votre module tiny_mce comme une attaque SQL Injection,

english translation :
I've just unblocked your IP address. I have found the origin. The mod_security thinks that your module tiny_mce is a SQL injection attack.

May it help to find the problem of error 406

best regards
Michel

Could it be that your local workstation and as a result it really tries to make an SQL injection to the site?

did you add some text like 1=1 5=5 or something similar in your text?

Please send me a PM with admin login and tell which item to edit and save , or what to do that for you cause error 406.

Regards

Presently the provider has created a rule to trigger error 406.

I'm contacting him to create a space like it was at the moment I've got the error last week.

Once done, I will create a test site and give you the access as super admin.

I contact you when it's ready

best regards

Michel

Hi developers!
Great Components, guys! Seen anything like it!

But as soon as I push the button to create the item, the site blocking and gives a constant error 406.
Separate control module provider can not change, and disable the module mod_security do not want.

How can I fix it?

Thank you!

There are 3 cases,

- 1. either you browser is hijacked
- 2. either some files in you installation has been changed
- 3. or this is false-positive of mod_security, aka some rule is matched by mod_security and recognizes something in the posted data as attack

-- mod_security can create millions of combinations of custom rules, can you tell us from the logs which custom rule was triggered?

(the log will include part of the matched text data that was identified as attack)

Besides the above also please take a look at this:

www.modsecurity.org/blog/archive ... false.html