Page 1 of 1

[solved] admin menu tabs problem on fresh install

Posted: Mon Nov 17, 2014 10:58 pm
by freegeek
Hi, I just did a fresh install CMS Version 1.11.11 using an installer on my Linux dataflame.com hosted site. All seems to work on the default site but the main menu tabs on the left of the admin page do not work when clicked on. Clicking on the items on the rest of the page does work, but these tabs don't.

CMS
Content
Layout
Users & Groups
Extensions
Site Admin
My Preferences


Any suggestions? ( I could have swore I posted this in the Installation, Setup and Upgrade forum but it has ended up here?)

Re: admin menu tabs problem on fresh install

Posted: Mon Nov 17, 2014 11:15 pm
by freegeek
OK, just spotted that if I click on the icon on the tab, it works but not on the text in the tab or the ^ symbol.

Is this normal?

Re: admin menu tabs problem on fresh install

Posted: Mon Nov 17, 2014 11:25 pm
by paulbaker
For me, this symptom (admin tabs did not expand when clicked on) was caused by my host having mod_security enabled. They switched it off for me and it all worked OK.

Re: admin menu tabs problem on fresh install

Posted: Tue Nov 18, 2014 4:20 pm
by freegeek
After clicked round on the admin I ended up being blocked from my site. Dataflame said;
Temporary Blocks: IP:80.xxxxxxxPort: Dir:inout TTL:900 (lfd - (mod_security) mod_security (id:1234123404) triggered by 80.xxxxxxxxxxxxx(GB/United Kingdom/fpc1-sgyl9-0-0-xxxxxxxxxxxxxxxxxx): 10 in the last 300 secs)
They then said they had turned off mod_security.

I asked if that was a security risk?

They said:
Mod_security is an apache module that helps to protect your website from various attacks.
I asked if I should be worried?

They said, after a long pause;
It is still enable on our server.
However the admin tabs are now working, so Paul, spot on and thanks for your help.

Do you guys have any thoughts on disabling mod_security?

Re: admin menu tabs problem on fresh install

Posted: Tue Nov 18, 2014 4:42 pm
by paulbaker
You're welcome. I don't think switching it off has any big implications (if it was very important hosts would not be willing to switch it off at all). Calguy, a CMSMS developer, has said it's basically a waste of time.