-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Spikowski wrote: [snip] | I also got the same error trying to put something after CHMOD on another | page. Does MediaWiki have a problem with programming code as text? Are you the same person who asked about chmod before? If so (or if not), I ask the same question I asked before in response: Are you running mod_security or another server configuration module that attempts to guess that submitted POST material might include exploit code and blocks the request? If this is a shared server that you do not control, ask your system administrator. - -- brion vibber (brion @ pobox.com)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Spikowski wrote: | Yes, this is the same person that reported the problem with the CHMOD issue | and when it did the same thing on LOCAL, I thought it might be something | else with MediaWiki. The wiki directory is set with read & execute | privileges. John, is there a reason you did not respond to my questions to your first inquiry? Did you not receive the message? For reference, here it is: http://mail.wikipedia.org/pipermail/mediawiki-l/2005-January/003150.html | It running on a shared host (ez-web-hosting.com) and the URL for the my wiki | is http://wiki.scriptbasic.info which redirects to | http://www.scriptbasic.info/wiki | | I'm note sure what to tell the support person how to fix my problem. Can | they make a change to Apache that only affects my site? I don't know what they can or can't do. You need to ask _them_ that. Explain to them that when certain patterns of text containing certain command names are submitted to forms in your PHP web applications, you get (certain, specific, repeatable) error messages (which you will quote to them). Give them exact, minimal examples of submitted text that causes a failure. For instance, "chmod" followed by a newline does not cause an error, but "chmod" followed by a space produces an Internal Server Error. You should make a simple test form like this: - ---- cut below this line: <form method="post"> <textarea cols="40" rows="10" name="wpTextbox1"><?php if( isset( $_POST['wpTextbox1'] ) ) ~ echo htmlspecialchars( $_POST['wpTextbox1'] ) ?></textarea> <input type="submit" /> </form> - ---- cut above this line Save it as 'test.php' or such and try pasting in the same text that causes you problems in the wiki. If it triggers the same problem, this will make it easier for your site admins to confirm what's going on. (If it doesn't trigger the problem, then you might need to add other fields from the real form, or perhaps even rename the file to trigger the check. Or it might be something totally unrelated, possibly.) - -- brion vibber (brion @ pobox.com)

I was getting the digest and must have missed it. I'm now getting them as they come out of the oven. ;-) I received a response back from my hosting support group and they validated your theory and had a filter running. It fixed the LOCAL tmp issue but the CHMOD problem still exists. Hope they drop the whole filter altogether as this is going to be a problem for a site that's hosting a programming language wiki. John -----Original Message----- From: mediawiki-l-bounces(a)Wikimedia.org [mailto:mediawiki-l-bounces@Wikimedia.org]On Behalf Of Brion Vibber Sent: Saturday, January 29, 2005 7:07 PM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Save Errors Agin - Programming Code Text -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Spikowski wrote: | Yes, this is the same person that reported the problem with the CHMOD issue | and when it did the same thing on LOCAL, I thought it might be something | else with MediaWiki. The wiki directory is set with read & execute | privileges. John, is there a reason you did not respond to my questions to your first inquiry? Did you not receive the message? For reference, here it is: http://mail.wikipedia.org/pipermail/mediawiki-l/2005-January/003150.html | It running on a shared host (ez-web-hosting.com) and the URL for the my wiki | is http://wiki.scriptbasic.info which redirects to | http://www.scriptbasic.info/wiki | | I'm note sure what to tell the support person how to fix my problem. Can | they make a change to Apache that only affects my site? I don't know what they can or can't do. You need to ask _them_ that. Explain to them that when certain patterns of text containing certain command names are submitted to forms in your PHP web applications, you get (certain, specific, repeatable) error messages (which you will quote to them). Give them exact, minimal examples of submitted text that causes a failure. For instance, "chmod" followed by a newline does not cause an error, but "chmod" followed by a space produces an Internal Server Error. You should make a simple test form like this: - ---- cut below this line: <form method="post"> <textarea cols="40" rows="10" name="wpTextbox1"><?php if( isset( $_POST['wpTextbox1'] ) ) ~ echo htmlspecialchars( $_POST['wpTextbox1'] ) ?></textarea> <input type="submit" /> </form> - ---- cut above this line Save it as 'test.php' or such and try pasting in the same text that causes you problems in the wiki. If it triggers the same problem, this will make it easier for your site admins to confirm what's going on. (If it doesn't trigger the problem, then you might need to add other fields from the real form, or perhaps even rename the file to trigger the check. Or it might be something totally unrelated, possibly.) - -- brion vibber (brion @ pobox.com) _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l

The problem is now fixed. See support's responses. < We have mod_security running on our servers. We have now disabled a filter that should solve the issue for you. LOCAL works, CHMOD is still broken. < We have disabled another mod_security filter. CHMOD works. Thanks Brion ! You know your stuff. John -----Original Message----- From: mediawiki-l-bounces(a)Wikimedia.org [mailto:mediawiki-l-bounces@Wikimedia.org]On Behalf Of Brion Vibber Sent: Saturday, January 29, 2005 7:07 PM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Save Errors Agin - Programming Code Text -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Spikowski wrote: | Yes, this is the same person that reported the problem with the CHMOD issue | and when it did the same thing on LOCAL, I thought it might be something | else with MediaWiki. The wiki directory is set with read & execute | privileges. John, is there a reason you did not respond to my questions to your first inquiry? Did you not receive the message? For reference, here it is: http://mail.wikipedia.org/pipermail/mediawiki-l/2005-January/003150.html | It running on a shared host (ez-web-hosting.com) and the URL for the my wiki | is http://wiki.scriptbasic.info which redirects to | http://www.scriptbasic.info/wiki | | I'm note sure what to tell the support person how to fix my problem. Can | they make a change to Apache that only affects my site? I don't know what they can or can't do. You need to ask _them_ that. Explain to them that when certain patterns of text containing certain command names are submitted to forms in your PHP web applications, you get (certain, specific, repeatable) error messages (which you will quote to them). Give them exact, minimal examples of submitted text that causes a failure. For instance, "chmod" followed by a newline does not cause an error, but "chmod" followed by a space produces an Internal Server Error. You should make a simple test form like this: - ---- cut below this line: <form method="post"<textarea cols="40" rows="10" name="wpTextbox1"><?php if( isset( $_POST['wpTextbox1'] ) ) ~ echo htmlspecialchars( $_POST['wpTextbox1'] ) ?></textarea<input type="submit" /</form- ---- cut above this line Save it as 'test.php' or such and try pasting in the same text that causes you problems in the wiki. If it triggers the same problem, this will make it easier for your site admins to confirm what's going on. (If it doesn't trigger the problem, then you might need to add other fields from the real form, or perhaps even rename the file to trigger the check. Or it might be something totally unrelated, possibly.) - -- brion vibber (brion @ pobox.com) _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l