tuffy

If you have a $_POST variable containing the word "curl", I get 403 errors.

People on my forum are trying to post on my forum with the word curl in their post, and it's 403'ing for them. I researched it and apparently its Apache's mod_security module blocking(?) the expression "curl *".

Can this be fixed through cPanel? If not, can someone at Surpass fix this?

Geoff

lol its implemented in order to stop people from taking advantage of holes in any scripts you might be running, which would allow them access to curl, and other misc utilities/features, and so on

I personally recommend you leave it on, it only makes your site more secure, but if you really wish to turn it off, create an .htaccess file in your forums root folder with the following in it:

SecFilterEngine Off

and that should turn off mod_security for that directory.

__________________
Geoff Ellis - Surpass Dedicated Server Customer
www.adepttechs.net

tuffy

Well I find it pretty retarded that I can't have people posting sentences like "I curl 50lb dumbells" on my bodybuilding forum

Thank you for that solution.

Geoff

perhaps, but im sure when phpBB or whatever gets another major vulnerability and you find "Pwnd by 1337h4cker" accross your home page or forums, which might have been stopped rather easily by mod_security, youll find that pretty retarded too

__________________
Geoff Ellis - Surpass Dedicated Server Customer
www.adepttechs.net

DewKnight

I believe that it's just a small error that needs to be fixed as far as the word curl being blocked. File a ticket with support, and they should be able to fix the problem

__________________

cowboy

On sites which use banned words as normal conversation, write a small javascript code to activate on submit which searches for these words and appends them with a nonstandard character, like a double dagger in the second position (c‡url). Then a preg_replace statement to remove it after submission and at the same time check for patterns used with cURL commands and intercept them yourself.

__________________
Where would you be if you were at the highest court in the land (US)?