Hi, I'm running a vbulletin off the back of my shared cpanel hosting. For some weeks now users have been describing random issues where they can't post/reply in the forums or send PMs. It's quite hit and miss. I've also noticed random periods when email servers haven't been available. I get occasional sql write error notifications in email and messages saying that /tmp can't be written to. Users also report 404 and 406 errors again on a random basis. vbulltin developers have checked the code and agree it's OK they believe the issue is server based. Has anyone experienced similar and can anyone offer a fix? I would be most grateful for any help..
I'm having the same problem on phpBB boards, same error messages, when trying to reply to private messages, today a new one when trying to use the % sign very odd
I'm having the same problem on phpBB boards, same error messages, when trying to reply to private messages, today a new one when trying to use the % sign very odd
I would suggest you as well to contact our support team via Live chat to get a instant solution.
Thank you, I did get in touch tonight, was told "we have recently updated the mod security rules which may block you to post such special words" don't understand what is special about percent sign but at least they fixed it and the PM messaging too
PS I tried using the sign here and it wouldn't post! got the 404 error
Special characters can be used for url/content injections which is used by hackers. It was a security threat and we want to provide secured Hosting environment to our clients to host their websites, so we disabled it. I have gone through your chat with Silvester J and saw that your issue was already sorted out. If you face the same issue again, you can contact our admins via Live chat for a instant solution.
I have spoken to technical guys a few times over the last few weeks regarding this issue. At no stage did they link the problem to mod_security upgrades. It was me that had to do the research and ask if it was used and if anything had changed. I was told on Sunday that they had upgraded mod_security2 a few weeks ago.. I don't recall any notification. Surely basic change management would inform stakholders? It certainly would have saved me an awful lot of stress - i know i have lost forum members as a result.
In my case, mod_security2 ended up being disabled for my domain and the problem was fixed.