Thread Starter
ndray
(@ndray)
“I” did manage to solve the problem…
I left the CMS alone for a while then, a few days later, I came back and saw that there was a newer wordpress version… I upgraded my instalation and the problem was gone.
I don’t know if the solution was the upgrade or something happened in my server… I did talk to them about the issue, maybe they did something… Try to figure what’s going on with your host providers…
Thread Starter
ndray
(@ndray)
I now know that mod_security2 is causing this problem. Disabling it is not a solution.
The module is blocking the POST:
Mon Sep 08 16:34:57 2008] [error] [client 213.22.159.193] ModSecurity: Access denied with code 400 (phase 2). Pattern match “\\\\%(?!$|\\\\W|[0-9a-fA-F]{2}|u[0-9a-fA-F]{4})” at ARGS:selection. [id “950107”] [msg “URL Encoding Abuse Attack Attempt”] [severity “WARNING”] [hostname “bugflux.org”] [uri “/wp-admin/options-permalink.php”] [unique_id “KVUMRH8AAAEAAGwKyAoAAAAI”]
I’d like to know if there’s any workaround or solution for this as my host is not willing to disable it, and this should not happen anyways, I believe…