When trying to save the settings for the taxonomy browser I get the following error message:

[Fri May 22 15:08:33 2009] [error] [client x.x.x.x] mod_security: Access denied with code 500. Pattern match "((select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe)[[:space:]]+[A-Z|a-z|0-9|\\\\*| |\\\\,]+[[:space:]]+(from|into|table|database|index|view)[[:space:]]+[A-Z|a-z|0-9|\\\\*| |\\\\,]|UNION SELECT.*\\\\'.*\\\\'.*,[0-9].*INTO.*FROM)" at POST_PAYLOAD [hostname "www.example.com"] [uri "/drupal-6.12/admin/settings/taxonomy-browser"]

I know strictly speaking taxonomy browser has nothing to do with how my provider has set up mod_security, but I don't get such an error message when changing settings for other modules. So perhaps taxonomy browser is doing something strange?

Comments

pvanderspek’s picture

pvanderspek commented
Status: Active » Fixed

mod_security issue fixed by switching off mod_security

JLambrecht’s picture

JLambrecht commented

You just switched off the main application-security layer of your hosting. Error 500 indicates the destination is unreacheable, be it a server or a service (as a page ) , you can also switch off this particular rule in the mod_security configuration.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.