[wp-trac] [WordPress Trac] #7736: Solution to mod_security issue
with Insert Into Post for Media
WordPress Trac
wp-trac at lists.automattic.com
Fri Sep 12 19:38:05 GMT 2008
#7736: Solution to mod_security issue with Insert Into Post for Media
----------------------------+-----------------------------------------------
Reporter: kaota | Owner: anonymous
Type: defect | Status: new
Priority: high | Milestone: 2.7
Component: Administration | Version:
Severity: normal | Keywords:
----------------------------+-----------------------------------------------
After some head banging and keeping up with many threads on the forums
regarding what to do about the problem mod_security presents with the
"Insert Into Post" button for media, I went out to solve the problem
myself. After some digging, it occurred to me that the button itself is
the problem. Many mod_security configurations deny anything that looks
like SQL, and yep, "INSERT INTO" is "SQL". I tried changing all
occurances of this in wp-admin/media.php to something else, like "Put
inside post" and it actually worked!
I suggest renaming the button so that fewer people will have to work
around this issue.
--
Ticket URL: <http://trac.wordpress.org/ticket/7736>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list