Sea-King Wordpress Save Failures

[IanAR]

Hi - I hope this is the correct forum.

ourHandymen.co.uk, on Sea-King.webHosting.uk.com (87.117.200.15, uses Wordpress (an unmodified Fantastico install).

Recently, it's been failing to save blog edits - The changes are lost and the editors browser is re-directed to ourHandymen.co.uk/

Any help or advice on this would be much appreciated. - Best, Ian

[Administrator]

Hello Ian,

Do you have a ticket open for this ?

If not then please open a ticket from http://support.webhosting.uk.com and one of our staff members will get this sorted for you. It would be helpful for me if you reply back over here with the ticket number.

[IanAR]

Thanks. Victor J has explained the failure on CGP-57792-588.

It seems the web-based Wordpress blog entry/edit uses scripting techniques that have, proved vulnerable to XSS attacks/injections and, been configured out.

I expect it'd be possible to hack the config' and/or Wordpress to retain security, while allowing web-based blog entry/edit. However, it'd rather this came with a standard Wordpress upgrade/patch. Unless there's already one that Victor'n'I're unaware of?

Meantime, I'm looking at client-side Wordpress blog entry/edit applications. Since, I expect these'll not fall foul of insecure scripting techniques and I've wanted to select one anyhow (to ease blog entry, by less HTML savvy company staff). CodeX.Wordpress.org/Weblog_Client

Any recommendations for Windows app's would be most welcome. - Ian

[Administrator]

I am not sure about that but temporary solution to this problem would be to disable mod_security for your account. You can add following code in .htaccess file located in your public_html

<IfModule mod_security.c>

    SecFilterEngine Off

    SecFilterScanPOST Off

</IfModule>

you cannot see the .htaccess file from FTP software so make sure that you edit the file from file manager or from FTP you should upload .htaccess.txt with this code and rename it to make it .htaccess.

[IanAR]

Thanks! That has worked by having a hacked .htaccess version, which I put in place when editing blogs (switching back to the original, after editing).

My search for client-side editors and/or other solutions continues. - Best, Ian