ConfigServer Community Forum

Hi Sergio, The line should be : POST /administrator/index.php?option=com_templates&view=template&id=506& Yes it contains http://, if you scroll down a bit you can see it : Referer: http://MyDomain_DOT_DOT_com/administrator/index.php?option=com_templates&view=template&id=506&f...

Dear Sergio, Thanks again for your help and fast response. Here is the log output from cmc which contains all information including the post line: ConfigServer ModSecurity Log Entries Expand All Collapse All Domain Source IP Rule ID Date Stamp MyDomain_DOT_DOT_com xx.xx.xx.xx 1234123404 [01/Aug/2014...

Thanks again Sergio, I have installed cmc and found that the rule that triggers this issue is : SecRule REQUEST_FILENAME|ARGS|ARGS_NAMES "(?:\b(?:(?:type\b\W*?\b(?:text\b\W*?\b(?:j(?:ava)?|ecma|vb)|application\b\W*?\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)...

Thank you Sergio for taking up the time to look into this issue. I checked the rule and fount it is as you have typed in your message i.e.: SecRule FILES_TMPNAMES "@inspectFile /etc/cxs/cxscgi_DOT_sh" \ "log,auditlog,deny,severity:2,id:'1010101'" I have typed the single quote wro...

I have installed cxs and added the lines : SecRequestBodyAccess On SecRule FILES_TMPNAMES “@inspectFile /etc/cxs/cxscgi_DOT_sh” \ “log,auditlog,deny,severity:2,id:’1010101′” To the file /usr/local/apache/conf/modsec2.user.conf Now every time I edit css template in joomla and press save I get : Not A...