Not saving item - ignores the description

jeffhoneyager
Topic Author
Offline
Senior Member

8 years 5 months ago #62753 by jeffhoneyager

Replied by jeffhoneyager on topic Not saving item - ignores the description

I went to the JCE forum. One person had similar issues. The JCE developer (Ryan) answered that the problem was a plugin conflict with the editor.

Seems like a potential solution.

Now - How do I go about finding it? There are so many plugins enabled... is there a way?

Thanks.

Please Log in or Create an account to join the conversation.

micker
Offline
Administrator

8 years 5 months ago - 8 years 5 months ago #62754 by micker

Replied by micker on topic Not saving item - ignores the description

you have a problem with your server i think ... ask to your provider maybe too much security ?
diasble plugin step by step no other solution

FLEXIcontent is Free but involves a very big effort on our part.
Like the our support? (for a bug-free FC, despite being huge extension) Like the features? Like the ongoing development and future commitment to FLEXIcontent?
-- Add your voice to the FLEXIcontent JED listing reviews. Thanks![/size]

Last edit: 8 years 5 months ago by micker.

Please Log in or Create an account to join the conversation.

jeffhoneyager
Topic Author
Offline
Senior Member

8 years 5 months ago #62757 by jeffhoneyager

Replied by jeffhoneyager on topic Not saving item - ignores the description

RESOLVED

The hosting company (LiquidWeb) is very tight on security.

The modsec security trips thinking the WYSIWYG editor is performing a SQL Injection (a false positive).

They saw something like this:

Code:

ModSecurity: Access denied with code 500 (phase 2). Pattern match "(insert[[:space:]]+into.+values|select.*from.+[a-z|A-Z|0-9]|select.+from|bulk[[:space:]]+insert|union.+select|convert.+\\(.*from)" at ARGS:jform[articletext]. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "247"] [id "300016"] [rev "2"] [msg "Generic SQL injection protection"] [severity "CRITICAL"] [hostname "YOURDOMAIN.com"] [uri "/index.php/add"]

This is whitelisted with A LocationMatch in Modsecurity
<LocationMatch "/index.php/add">
SecRuleRemoveById 300016
</LocationMatch>

All is well. The sun is shining a little brighter and the birds are singing louder.

Thank you for you help and suggestions.

Please Log in or Create an account to join the conversation.