svn[1202][1234] 406 error on rostercp

by **Jasun** » Sat Aug 18, 2007 1:25 am

im betting mod_security is the problem, for the hell of it you can try adding the line:
SecFilterEngine Off
in your .htaccess file or asking the web host to add an exception for your roster

by **aldebrand** » Sat Aug 18, 2007 1:35 am

well that sorted it thanks

by **TheHelp** » Sat Aug 18, 2007 1:54 am

thanks Jasun, this also fixed the same problem that I was having.

by **Jasun** » Sat Aug 18, 2007 2:27 am

no problem, happy to help

by **PleegWat** » Sat Aug 18, 2007 3:50 am

Thanks. Should I add this to the shipped .htaccess?

Code: Select all: # ONLY IF MOD_SECURITY IS INSTALLED <IfModule mod_security.c> SecFilterEngine Off </IfModule>

by **PleegWat** » Sat Aug 18, 2007 4:14 am

Thinking about it a bit, that may not work too well. Probably, in many cases, hosts will not allow mod_security to be controlled in .htaccess files. Plus, it's there for a reason.

Can anyone experiment a bit and find out what kind of mod_security rule is blocking out rostercp?

by **Jasun** » Sat Aug 18, 2007 4:21 am

it might save some folks looking thru the forums for a fix, alot of hosting companys add filters to mod_security to prevent page hijacks, the admincp seems to trigger them maybe the post size isnt specified somewhere in the roster or something thats usually a common one.. but again without a list of the filters and/or the error log from the webhost i couldnt tell you if there was another way around it..

by **PleegWat** » Sat Aug 18, 2007 4:54 am

Yeah, but post size is only for file forms, right? None of those in rostercp.
Mod_security is one of several things we (or at least I) develop without. If there's one or more common rules we're violating, I'd love to know, but "It's a mod_security error" doesn't help at all.

by **aldebrand** » Sat Aug 18, 2007 5:00 pm

well there wasnt any errors in the error log belonging to this fault, but if theres anything else you need to know then just say and ill try and get it for you

by **zanix** » Sun Aug 19, 2007 2:46 am

We just really need to figure this out so people on servers that won't let them make the .htaccess change can work too

by **Shadowsong** » Wed Sep 05, 2007 1:20 pm

A thanks from me, too.
My System:
OS: Linux 2.6.9-55.0.2.plus.c4smp
Apache: 1.3.37 (Unix)
mySQL Version: 5.0.24-standard
PHP-Info is coming later... (if you need it) but it is 5

by **Danaki** » Wed Sep 05, 2007 9:56 pm

This is just for FYI. The above fix to the .htaccess file did correct the issue.

I am getting the same error with a fresh install and fresh database.

WoWRoster v1.9.9.1298

Apache version 1.3.37 (Unix)
MySQL version 5.0.27-standard
PHP version 5.0.4

http://www.danaki.net/rostertest

Not Acceptable
An appropriate representation of the requested resource /rostertest/index.php could not be found on this server.

Apache/1.3.37 Server at www.danaki.net Port 80

by **Coccyx** » Thu Sep 06, 2007 12:03 am

PleegWat wrote:Thanks. Should I add this to the shipped .htaccess?

Code: Select all
# ONLY IF MOD_SECURITY IS INSTALLED <IfModule mod_security.c> SecFilterEngine Off </IfModule>

This worked for me as well. Thank you for adding the full code as I'm a noob and would have probably taken down the whole server somehow without it!