[SOLVED] internal server error when adding a link

[mrasch]

When I try to add a link into the text (when I work with the editor)  I get an internal server error when I click save. It happens only when I make an external link, starting with 'http://' when I leave this than I can save the page with no problem. Just updated to the latest version. I think the problem started when my provider updated the php version...

[Dr.CSS]

What kind of error?...

How are you adding the link?...

[mrasch]

The error is:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator to inform of the time the error occurred and of anything you might have done that may have caused the error. More information about this error may be available in the server error log.
--------------------------------------------------------------------------------
Web Server at epafras.nl

And the server error log states:
[Sun Jul 27 14:23:03 2008] [error] [client 87.212.161.188] mod_security: Access denied with code 500. Pattern match "!/imp/login\\.php" at HEADER("Referer") [id "300018"] [rev "3"] [msg "Generic PHP code injection protection via ARGS"] [severity "CRITICAL"] [hostname "www.epafras.nl"] [uri "/admin/editcontent.php?content_id=86&page="] [unique_id "d@gbqn8AAAEAAE9@UrcAAAAw"]

It doesn't matter how I add the link. By pressing the right button in the editor, or when I type <a href=... in html or when I type a hyperlink (lke www.nu.nl) and the editor makes it a link automatically.

If I enter the hyperlink 'httx://www...' (which of course doesn't make a good link) I  do not get the error and I can save the page. When I change this x for a p than I get the error.

[Greg]

Check with your Web Hosting provider - seems to be related to the mod_security settings for apache.

[mrasch]

Yes, that helped! I added the following line to .htaccess:


SecFilterEngine Off
SecFilterScanPOST Off
SecFilterCheckURLEncoding Off


and that solved the problem. Thanks!!

[willem01]

Hi there. I receive the same error just since this afternoon.
Could you please tell me where you added that code. (where can I find that .htaccess / what is it?)

[mrasch]

hi, that file is in the root, or in the folder httpdocs.  The name of the file is .htaccess (no extension and including the . )

I added these few lines at the bottom of the file and that did the trick.