Forum broken?

Tried again over there, no workie:
 

Attachments

  • Screen_shot_2009_11_15_at_12.57.40_PM.png
    Screen_shot_2009_11_15_at_12.57.40_PM.png
    36.4 KB · Views: 42
Ok, I pinned the problem down to what causes it. If I put the three words "Python,Ruby,Perl" and separate them with a forward slash instead of commas, then I get the error. Try doing a post with that in it.
 
Actually, if you precede the word "Perl" with a forward slash, it causes the error. Are you running mod_security in Apache?
 
I'm having the same problem... without using those words at all - this has been going on/off for some time. There is a HUGE BUG in this board, I don't think Dan believes me.
 
I've got some weird issue where a section of text I tried posting to my blog kept getting an error. I can't post it on the blog, forums, or a PM! It has no special characters in it either...it's just text. I emailed Dan, as that was the only way I know of to tell him what the text is.
 
I'm having the same problem... without using those words at all - this has been going on/off for some time. There is a HUGE BUG in this board, I don't think Dan believes me.

Aaron, we have gone over this many times. There is no bug, you are simply tripping a security feature. I just need to do some more fine tuning (I would rather have it too sensitive and then make changes instead of it not being sensitive enough). I'll try to look into this more this weekend.
 
I'm having the same problem... without using those words at all - this has been going on/off for some time. There is a HUGE BUG in this board, I don't think Dan believes me.

Aaron, we have gone over this many times. There is no bug, you are simply tripping a security feature. I just need to do some more fine tuning (I would rather have it too sensitive and then make changes instead of it not being sensitive enough). I'll try to look into this more this weekend.

Dan, it is funny that several of the forum users have found and posted about the same problem yet you have not found it. It seems to show up and may be related to the forward slash, as pointed out by others above.

It is DEFINITELY a bug, NOT security related.

You can easily repro: create a post with nothing but the txst... CDslashDVD (change the word 'slash' for a forward slash / )
 
Aron;

Dan is an Internet Security Expert and employs custom features to this forum to insure its protection from the many security threats out there.

In doing so, he writes and runs various custom scripts that look for "key" word and character combinations that could potentially be a threat to this board.

You are "triggering" various scenarios that may be viewed as possible threats!

As Dan once stated, it's better to error on the side of caution, then possibly tweak the scripts later down the road if needed. :eek:
 
I'm having the same problem... without using those words at all - this has been going on/off for some time. There is a HUGE BUG in this board, I don't think Dan believes me.

Aaron, we have gone over this many times. There is no bug, you are simply tripping a security feature. I just need to do some more fine tuning (I would rather have it too sensitive and then make changes instead of it not being sensitive enough). I'll try to look into this more this weekend.

Dan, it is funny that several of the forum users have found and posted about the same problem yet you have not found it. It seems to show up and may be related to the forward slash, as pointed out by others above.

It is DEFINITELY a bug, NOT security related.

You can easily repro: create a post with nothing but the txst... CDslashDVD (change the word 'slash' for a forward slash / )
Well, since you obviously know more about this site than I do, go ahead and 'fix it' :eek: There is no problem to find, I know EXACTLY what is going on.

As BSR said, it's not a bug. There are exploits out there which rely on being able to to change the directory (that's what CD/ means, in case you didn't know). I am sorry it inconveniences you that I go out of my way to secure this site. It's something I will adjust once I have a little bit more time (I also work for a living, but it's on my list of things to do), but making posts like that does not make me want to work any faster :p
 
Dan,

UR doing a great job with the board. Its sincerely appreciated that you care about keeping the board secure.
 
I tried to do a

Code:
cd(slash)
and I get:

Code:
-bash: cd(slash): No such file or directory

(Replace "(slash)" with "/.")

It's weird that the forum can interpret this as a security threat, but what that error tells me is that you'll need a space between cd and a forward slash.

I'm using Ubuntu Server 10.10 development branch if that helps.

Whoops! Even inside a code block, a "Method Not Implemented" gets triggered.
 
Back
Top