Welcome,
Guest
.
Please
login
or
register
.
Did you miss your
activation email
?
News:
Bug reports and fixes
.
Home
Help
Login
Register
Elxis CMS Forum
»
Support
»
Security
»
Continuously banned when editing multi-lingual versions of article
« previous
next »
Print
Pages: [
1
]
2
Author
Topic: Continuously banned when editing multi-lingual versions of article (Read 14562 times)
seadhna
Sr. Member
Posts: 485
Continuously banned when editing multi-lingual versions of article
«
on:
May 11, 2016, 15:27:41 »
Hi, we are getting banned for simple edits when editing the Spanish version of articles. e.g. inclusion of a straight apostrophe (curly apostrophe is ok) is causing a security warning: forbidden!
Sometimes, just adding or changing the article title in the French or Spanish version is causing this Forbidden! alert.
Can you advise?
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #1 on:
May 11, 2016, 15:48:35 »
So, here is a specific example. The following piece of code causes a 'Forbidden' error and the text is not saved (in an alternate language version of the site):
<p>The work of the ILHR Programme is central to the attainment of PGA's vision.</p>
If I change the apostrophe to a "curly apostrophe", I am able to save the code without error:
<p>The work of the ILHR Programme is central to the attainment of PGA’s vision.</p>
Logged
webgift
Elxis Team
Hero Member
Posts: 4192
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #2 on:
May 11, 2016, 18:18:11 »
Try to use the HTML number for single quotes as quoted below!
<p>The work of the ILHR Programme is central to the attainment of PGA
'
s vision.</p>
Logged
Elxis Team •
Custom web design [EN]
-
[EL]
•
.GR Registrar
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #3 on:
May 16, 2016, 19:52:19 »
Hi, yes, this also works, but just a temp. solution right? Is this a known glitch with the CMS?
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #4 on:
May 16, 2016, 21:02:31 »
Also, while this workaround 'works', it only works for one 'save'. If you click 'apply' a 2nd time, the CMS has changed the HTML codes back to apostrophes and the save is forbidden and the admin is banned.
Logged
datahell
Elxis Team
Hero Member
Posts: 10319
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #5 on:
May 18, 2016, 20:48:57 »
@seadhna
I have no problem saving article with any type of quote/apostrophe. I believe it is something that has to do with your php settings. Do you use PHP less than 5.4? You can bypass this problem by remove the
Elxis Defender
security rule that causes you the problem. Write me
exact Reference code
you get by Elxis Defender.
«
Last Edit: May 18, 2016, 20:51:51 by datahell
»
Logged
Elxis Team
|
Is Open Source
|
IOS Rentals | IOS AERO
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #6 on:
May 19, 2016, 16:50:30 »
Hi! So, if I try to save a multilingual version of any article and the text includes ' a popup says:
www.example.org
says: Error! Forbidden.
If I do that three times, I am banned and when I reload the CMS in the browser the message is:
Request dropped!
You have been banned! If you think this is wrong contact the site administrator.
Reference code: SEC-DEFB-0001
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #7 on:
May 19, 2016, 16:52:54 »
PHP version is 5.5
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #8 on:
May 19, 2016, 16:58:40 »
I changed the Elxis Defender setting to 'General Rules' only, but this has not resolved the issue.
Other security settings are:
security level: normal
SSL switch: off
Encryption method: mCrypt
Check IP moment: After loading Elxis core
Accept X-Frame: Yes.
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #9 on:
May 19, 2016, 16:59:51 »
I just noticed how you phrased your reply "I have no problem saving article"
I also can save an article (in the primary language of English) no problem.
This happens ONLY when attempting to save secondary language versions of an article.
Logged
fivar
Full Member
Posts: 202
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #10 on:
May 19, 2016, 17:15:36 »
My hosting provider has a firewall (mod security). When it was active i had similar problems.
Logged
datahell
Elxis Team
Hero Member
Posts: 10319
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #11 on:
May 19, 2016, 22:34:43 »
You are right, there is problem saving single quotes in translation items.
I have 2 solutions for you, pick your preferred one.
1. Stop Elxis Defender blocking single quotes
open this file:
includes/libraries/elxis/defender/general.rules.php
Change line 63 from this:
array('POST', '\<|\>|\"|\'', 'Unescaped character'),
To this:
array('POST', '\<|\>|\"', 'Unescaped character'),
2. Encode single quotes.
Open this file:
components/com_etranslator/includes/mlapi.js
Go to lines 415 - 420:
if (trtext == '') {
msgObj.className = 'ml_message ml_error';
msgObj.innerHTML = mldata.prtransmsg;
msgObj.style.display = '';
return false;
}
Add below:
trtext = trtext.replace(/'/g, ''');
After this change hit control+F5 in your browser to refresh its cache.
I will patch Elxis with the
second
solution. Thanks for reporting this problem.
«
Last Edit: May 19, 2016, 22:37:55 by datahell
»
Logged
Elxis Team
|
Is Open Source
|
IOS Rentals | IOS AERO
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #12 on:
May 31, 2016, 23:44:47 »
Great! Thanks!
Logged
seadhna
Sr. Member
Posts: 485
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #13 on:
July 12, 2016, 00:18:37 »
Hi Datahell,
this issue is happening now when an apostrophe is present in the article title - even in English (primary language).
e.g. if I type: test's
as the article title and then click 'suggested' for the SEO title, I get the 'forbidden' popup alert.
Logged
datahell
Elxis Team
Hero Member
Posts: 10319
Re: Continuously banned when editing multi-lingual versions of article
«
Reply #14 on:
July 14, 2016, 22:32:38 »
Please write your exact Elxis version and the error message/code you get.
Logged
Elxis Team
|
Is Open Source
|
IOS Rentals | IOS AERO
Print
Pages: [
1
]
2
« previous
next »
Elxis CMS Forum
»
Support
»
Security
»
Continuously banned when editing multi-lingual versions of article