logotype

Discussion of company’s products and Yii framework

Skip to content

Security Issue

Your suggestions about improvements and new modules etc.

Moderators: Koduc, Xpycm

Forum rules
Pay attention! Forum is not a means for guaranteed support of clients and users. An answer as well as a quick answer is not supposed on the forum. We post messages as soon as possible.

The message limit on the forum is 3 messages per day.
If you want to say "thank you" then use the function "Give good reputation point", which is a green icon "plus" under the nickname of the person, who answered the message.
Post a reply

Security Issue

Postby falcodj » 06 Apr 2016, 22:58

I had a problem to upload images for photo listings and I contacted my web host propvider. He replied


The application does not conform to security standards and it was triggering a ModSecurity rule, (OWASP 960010 Request content type is not allowed by policy)

I have disabled this rule (not ideal solution)

This is now working.

I believe that this causes a security problem
falcodj
Stranger
 
Posts: 6
Joined: 03 Apr 2016, 14:10
Reputation point: 0
Top

Re: Security Issue

Postby Xpycm » 07 Apr 2016, 08:10

You may enable mod_security2.so and send us your domain and ftp access data (via contact form : https://monoray.net/contact). we will try to fix the problem and add changes in product
Dropbox
Open Real Estate CMS: FAQ | FAQ 2 | FAQ 3
Image
Xpycm
Web Developer
Web Developer
 
Posts: 281
Joined: 30 Dec 2011, 11:06
Reputation point: 2
Top

Re: Security Issue

Postby Xpycm » 27 Jun 2016, 19:50

UPD:

Put this:
SecFilterEngine Off
in the .htaccess.

LINKS:
http://pumastudios.com/2009/05/file-upl ... in-ajaxphp
Dropbox
Open Real Estate CMS: FAQ | FAQ 2 | FAQ 3
Image
Xpycm
Web Developer
Web Developer
 
Posts: 281
Joined: 30 Dec 2011, 11:06
Reputation point: 2
Top
Post a reply

Return to Improvements

Who is online

Users browsing this forum: No registered users and 2 guests

Powered by phpBB® Forum Software © phpBB Group