this is some real voodoo going on, I'm telling ya!
If I write "from December to March" in my textfield with FCK Editor enabled I can't save the node.. it throws a page not found error. If I leave out the "from" and only type "December to March" then I can save the node.. what's wrong with "from ... to ..."? Is that restricted to use or what?
If I try to recreate this issue in a new node.. it works just fine..
I must say that the node where I have the issue on was an old node that was imported by the node import module from a D4.7 site. But even if I typed the entire text myself.. it was impossible for me to save it.

This totally beats me. I spent more than 12 hours trying to find the issue.. pulling out my hair.. I'm bold now :-)))
Finally by eliminating certain parts of text that allowed me to save the content I've found the words causing this.

FYI
D6.14

Comments

mephir’s picture

mephir commented

The problem might be in mod_security, it can identify "from ... to ..." like sql injection and return 403 error.

Jorrit’s picture

Jorrit commented
Category: bug » support
Priority: Critical » Normal
Status: Active » Postponed (maintainer needs more info)

That would be a good possibility, great find! BassPlaya: could you look into this?

bassplaya’s picture

bassplaya commented

@ mephir, you're saying that it is a 403 error? Isn't a page not found a 404 error?

@ Jorrit, I don't have a clue how to do this injection... I usually don't use needles for doing web design.. I guess that says a lot of my knowledge of trouble shooting here.. Not that I don't want to help but I simply don't understand how to do and what potential risks/issues are coming with this injection as I'm doing this on a production site.

Jorrit’s picture

Jorrit commented
Status: Postponed (maintainer needs more info) » Closed (fixed)

There is no risk, as far as I can see. I think it's an eager security tool that prevents you from posting anything that contains from ... to.