[wp-trac] [WordPress Trac] #6509: swfupload problems with mod_security

WordPress Trac wp-trac at lists.automattic.com
Sun Sep 6 13:25:59 UTC 2009


#6509: swfupload problems with mod_security
------------------------------------------+---------------------------------
 Reporter:  SteveAgl                      |        Owner:  anonymous 
     Type:  defect (bug)                  |       Status:  closed    
 Priority:  normal                        |    Milestone:  2.9       
Component:  Upload                        |      Version:  2.5       
 Severity:  normal                        |   Resolution:  worksforme
 Keywords:  needs-test reporter-feedback  |  
------------------------------------------+---------------------------------
Changes (by hakre):

  * keywords:  needs-patch reporter-feedback => needs-test reporter-
               feedback
  * priority:  high => normal
  * status:  new => closed
  * resolution:  => worksforme


Comment:

 maybe umask is missing here as well (see #10170)?

 aditionally there is not much way to check for mod_security or at least
 for the specific configuration that perevents on certain hosts.

 to tell you the truth: worksforme. I have wordpress blogs on hosts with
 mod_security enabled and no problems. This is a server configuration thing
 so please check your mod_security settings or disable it via .htaccess:


 {{{
 <IfModule mod_security.c>
 <Files async-upload.php>
 SecFilterEngine Off
 SecFilterScanPOST Off
 </Files>
 </IfModule>
 }}}

 Logentry of the check enabled in mod_security that prevented file uploads
 on one host (as only one sole person has reported the real details in her
 case):
 http://wordpress.org/support/topic/162373?replies=12#post-716574

 As reported, this is works for me, I have zero/nada/no problem with
 mod_security and swfupload. Can please someone provide a detailed testcase
 to reproduce this so that it can be actually confirmed?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/6509#comment:9>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list