[Mediawiki-l] Strange problem with search

Jack Eapen C jackec at suntecgroup.com
Mon Jun 9 07:07:09 UTC 2008


Hi,

Mod_security is not enabled in my server -i.e I checked the httpd.conf
file and the apache modules folder. Reference to the particulat module
is not in the conf file and the mod-security.so file is not in the
folder. Any other hints, plz? 


Regards,
 
Jack
----------------------------------------------------------------
"May He protect us both. May He cause us both to enjoy.May we exert
together. May our studies become brilliant. May we not hate each other"


-----Original Message-----
From: mediawiki-l-bounces at lists.wikimedia.org
[mailto:mediawiki-l-bounces at lists.wikimedia.org] On Behalf Of Brion
Vibber
Sent: Friday, June 06, 2008 12:27 AM
To: MediaWiki announcements and site admin list
Subject: Re: [Mediawiki-l] Strange problem with search

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jack Eapen C wrote:
> When I search with SOME keywords, my production wiki returns a "blank"
> page. If I use the same words on the test wiki, no probs-results are 
> returned (content in both wikis are same). Some of the problematic 
> words are "transaction" (transaction backout has no problem), 
> function, cards (plastic cards is fine), account etc.

Sounds like one of those "security" plugins for your web server, perhaps
mod_security.

It's set in an overprotective mode that freaks out and denies access
when it sees bits of text coming through the form submission that it
thinks are indicative of an SQL or code injection attack.

Contact your system administrator and let them know they've
misconfigured the software and should back it out to more reasonable
settings.

- -- brion vibber (brion @ wikimedia.org) -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhINxkACgkQwRnhpk1wk47kngCgvrQx86kyR1mt71unPhvz+piA
oKkAnR3rnrecJq3COq8NvVtkA0KIQM0Y
=AoIU
-----END PGP SIGNATURE-----

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l at lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


This electronic mail (including any attachment thereto) may be confidential and privileged and is intended only for the individual or entity named above. Any unauthorized use, printing, copying, disclosure or dissemination of this communication may be subject to legal restriction or sanction. Accordingly, if you are not the intended recipient, please notify the sender by replying to this email immediately and delete this email (and any attachment thereto) from your computer system...Thank You



More information about the MediaWiki-l mailing list