[wp-trac] [WordPress Trac] #7736: Solution to mod_security issue with Insert Into Post for Media

WordPress Trac wp-trac at lists.automattic.com
Fri Sep 12 19:38:05 GMT 2008


#7736: Solution to mod_security issue with Insert Into Post for Media
----------------------------+-----------------------------------------------
 Reporter:  kaota           |       Owner:  anonymous
     Type:  defect          |      Status:  new      
 Priority:  high            |   Milestone:  2.7      
Component:  Administration  |     Version:           
 Severity:  normal          |    Keywords:           
----------------------------+-----------------------------------------------
 After some head banging and keeping up with many threads on the forums
 regarding what to do about the problem mod_security presents with the
 "Insert Into Post" button for media, I went out to solve the problem
 myself.  After some digging, it occurred to me that the button itself is
 the problem.  Many mod_security configurations deny anything that looks
 like SQL, and yep, "INSERT INTO" is "SQL".  I tried changing all
 occurances of this in wp-admin/media.php to something else, like "Put
 inside post" and it actually worked!

 I suggest renaming the button so that fewer people will have to work
 around this issue.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7736>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list