Certain comments result in 404

[Paul Wood]

Someone tried to post the comment below on my photoblog, but got a 404 error. Other comments can be posted -- I tried a test comment and it worked. I cut and pasted the comment below and it didn't.

Any ideas?

A very cute little thing! At first I thought that I may have tried to isolate the little cat more from the background, with less distractions from the colored objects behind, but then of course it would have been a mistake. The little cat has gone through a terrible ordeal (as many other beings, human and not), and this photo shows exactly that, in his trying to cool off, and rest a little now that he is safe. BTW, I was wondering if there is a website will all photos, organized by categories, of all the pets that have been rescued, for potential adopters or displaced owners to look at them.

[Joe[y]+]

hum. just have a play around with the slightly less standard bits like brackets and stuff. i can't see why any of this should matter but give it a go. 'cause i'm stumped for what's wrong!

[raminia+]

if you are using that modification I announce to prevent hijack attament and to show them the 404 error, make sure that you redirect comments correctly to the page
this is the sample code fore redirection.

	<meta http-equiv="refresh" content="5; URL=<?php 	echo $_SERVER['HTTP_REFERER']; ?>">

btw, I've tested this comment on my local server and it was ok.

[Paul Wood]

No, I don't think I'm using that modification. But even so, I'm stumped as to why it was that particular comment. I've had a dozen or so since then, and no reports of problems.

[Paul Wood]

Ok, now I'm getting a 404 when I'm trying to upload a new image. Worked fine yesterday, doesn't today. I haven't changed anything for the last week, at least.

Dang it!

Error msg:
The requested URL /fotoblog/admin/index.php was not found on this server.

[Joe[y]+]

if you haven't changed anything then you should ask your host if they have.

cheers.

[raminia+]

yeah it seems a 404 from host. in 1.4.2 we do not show fake 404

[Paul Wood]

It's been fixed. From my provider:

Hi Paul,
As I suspected some of your string includes linux commands. Our pattern matching looks to be far to extreme.

mod_security-message: Access denied with code 404. Pattern match "catx20" at POST_PAYLOAD.
mod_security-action: 404


As you had the text 'cat ' in your string it was being denied by Apache.

I have fixed this and your post now works.

This also answers another question from one of my earliest images that had the word "cat".

[Joe[y]+]

cool - glad all is good now.

[raminia+]

kitty cat