I have the oddest bug in 3.5.16 - can't use the words "selection" and "from" in the same field??
Development and Programming
6 years ago
A user was not able to submit a channel entry and I couldn’t figure out why. I’ve narrowed it down to the fact that I cannot use the words “selection” and “from” in the same channel entry field. If I click submit it dumps me out to a 404 page.
The only thing I can think of is that it those words are a bit SQLy? Is this an SQL injection attack prevention measure?
I’m able to replicate this in other channels. If create an entry with just the words “selection from” I get the same error. Any ideas?
6 years ago
for future googlers:
I’d just updated our server from Easy Apache 3 to Easy Apache 4. A setting in “modsecurity” must have changed and it was triggering that module thinking it was, i assume, a SQL injection attack attempt