Not Acceptable 406 TP Problem? -Shelved-

[TedNigma]

Below is the original boggle.  However, my host has told me that their 'new' mod_security rules block..  Here is the last email I got from them.

If you have people having problems running shout box with TinyPortal installed, then the below host could be the boggle.  They have refused to lift the rule to accept TP ;id calls from index.php.

This project is shelved.  It was a good ride guys, just thought it would be years instead of days before it hit the wall.  I am looking for a SMF/TP friendly host, however the best are also the most expensive.

Thanks for the help and posts.
Ted

Here is the one where they told me to disable security.  Why was it enabled if disabling it is not an issue?

There's some miscommunication 
we didn't disable SMF. We just enabled mod_security. If you prefer smf - that's fine, just disable mod_security using your .htaccess file
Thank You,
xxxx
www.webhostingpad.com
Support Team Lead

Hello,

Your installation hits the rule that can't be disabled ie system command injection. Please review official articles of smf forums
regarding this issue, there's no way to disable mod_security rule like this one.
Thank You,
xxxxxxx
www.webhostingpad.com
Support Team Lead

I've been back and forth with my host on this.  I've tried SEVERAL new installs, with the same problem.  However they sent this email.  I bolded the part of interest to me. 

Also, can someone please verify the proper install?  Do you install SMF then TP, and use the shoutbox that shows in TP?  or do you install SMF, TP, then the Shout Box mod from SMF?  or Install SMF, Shout Box Mod, TP?

I've tried all installs in the orders above.  Is there a 'PROPER' one? 

Now, I am not the brightest.  However, does not the log file state it is indeed blocking the action

index.php?action=tpmod;id=shout

?

Now, they are trying to blame TP; which worked perfect for a few days before the 'forum crash', and now they say it's broken? 

So I ask our development or seasoned users.  Is the action call correct in index.php?action=tpmod;id=shout  or should I change 'id' to another variable?

Thanks a ton, I've wasted a whole day already.
Ted

Code Select Expand

I checked our logs:

[Fri Mar 07 14:43:57 2008] [error] [client 194.24.162.67] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:(?:n(?:et(?:\\\\b\\\\W+?\\\\blocalgroup|\\\\.exe)|(?:map|c)\\\\.exe)|t(?:racer(?:oute|t)|elnet\\\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\\\.exe|echo\\\\b\\\\W*?\\\\by+)\\\\
b|c(?:md(?:(?:32)?\\\\.exe\\\\b|\\\\b\\\\W*?\\\\/c)|d(?:\\\\b\\\\W*?[\\\\\\\\/]|\\\\W*?\\\\.\\\\.)|hmod.{0,40}? ..." at ARGS:action. [id "950006"] [b][msg "System Command Injection. Matched signature <;id>"] [severity "CRITICAL"][/b] [hostname "www.therhinofiles.com"] [uri "/forum/index.php?action=tpmod;id=shout"] [unique_id "6cvahkVBIRUAAENOrU4AAAAa"]

Please check your index.php file to resolve this issue and try to reupload it.

Thank You,
xxxxx
www.xxxxxxxx.com
Support Team


BELOW THIS IS MY ORIGINAL POST

I searched the forum and found a little about this error.  I concede it's a HOST boggle and not a TP/SMF one.  However, one thing boggles me.

If I have the shout box in a block; tried deleting/moving it with the same results, and try to shout, I get the

Not Acceptable

An appropriate representation of the requested resource /forum/index.php could not be found on this server.

Error.

Now, the FUN part. HA!
If I click on "Show Last 50 Posts"  it opens the Shout Box in the 'center frame'.  I CAN shout from THERE!!  But not the block.  The 'urls' are different, as described below.

http://www.therhinofiles.com/forum/index.php?action=tpmod;id=shout

is the code the the SHOUT button in the block.  And it fails.

Now the code for the SHOUT button that comes up when it's in the center is.

http://www.therhinofiles.com/forum/index.php?action=tpmod;sa=shoutbox;shouts=50

Which seems to work.

Tips?  laugher?  Prayers?  Booze?

Just thought I'd ask the pros.  I've a ticket into my host, but have not heard back yet.

You can verify this at Forum
user = test
pass = test

Just strange.  Seems if one ?action=shout call fails, both would.
Thanks,
Ted

[IchBin]

If you can't get your .htaccess file to work, then tell them to fix it and make it work for you. IF they can't fix this, get a refund on your money and move to a good host who knows what they are doing.