[wp-trac] Re: [WordPress Trac] #3627: 500 Server Error For Long Posts

WordPress Trac wp-trac at lists.automattic.com
Mon May 14 00:05:06 GMT 2007


#3627: 500 Server Error For Long Posts
-----------------------------+----------------------------------------------
 Reporter:  AndyBeard        |        Owner:  anonymous
     Type:  defect           |       Status:  reopened 
 Priority:  highest omg bbq  |    Milestone:           
Component:  General          |      Version:  2.0.7    
 Severity:  major            |   Resolution:           
 Keywords:                   |  
-----------------------------+----------------------------------------------
Comment (by dwdyer):

 This might shed some light on things (from the Apache error log).  Looks
 like mod_security is blocking requests because it thinks there is a SQL
 injection attack:

 [Mon May 14 00:52:53 2007] [error] [client 81.179.87.206] mod_security:
 Access denied with code 500. Pattern match
 "(insert[[:space:]]+into.+values|select.+from|bulk[[:space:]]+insert|union.+select)"
 at POST_PAYLOAD [id "300016"][rev "1"] [msg "Generic SQL injection
 protection"] [severity "CRITICAL"] [hostname "blog.uncommons.org"] [uri
 "/wp-admin/post.php"]

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3627#comment:11>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list