Page 1 of 1

Error while posting a note

Posted: 16 May 2017, 17:37
by jeffh
Hello,

We have been receiving a strange error when adding a note to an issue. We were experiencing this with build 1.2.19. We upgraded to build 2.4.0 last night and still have the same error.

The following note will throw the error:
---
Prior to today(5/8/2017), you WERE able to pick the format by selecting the delimiter. However, I made a change today that takes away the need to select a delimiter and will now present the user with a dialog box that allows for selecting of the format, including Excel, and sending the export as email.
---

If we remove the word "user", the note will post. otherwise, we receive the error attached.

The only code carried over from build v1.2.19 is our config_inc.php file.

Any ideas?

Thanks,
Jeff

Re: Error while posting a note

Posted: 17 May 2017, 13:13
by atrol
Is there any Proxy or Firewall between your browser and the web server?

Re: Error while posting a note

Posted: 17 May 2017, 14:35
by jeffh
No proxy or firewalls in place. This issue affects all of my users spread across the country.

The issue doesn't present itself when I posted a note to the mantisbt.org bug db.

It feels like a setting, but I don't see anything in the config that would affect this. It may be in the mySQL setup, but I don't know where to check.

Jeff

Re: Error while posting a note

Posted: 17 May 2017, 18:23
by atrol
Do you use Apache?
If yes, do you have enabled mod_security?

Did you check your web server logs for errors and warnings?

Re: Error while posting a note

Posted: 17 May 2017, 20:40
by jeffh
It is hosted on a shared server. I don't have root access to apache.

Why would mod_security have anything to do with posting a form containing the word "user"? Is there an encoding issue?

Jeff

Re: Error while posting a note

Posted: 18 May 2017, 18:52
by atrol
jeffh wrote:It is hosted on a shared server. I don't have root access to apache.
So how can you know that this is true?
jeffh wrote:No proxy or firewalls in place.
Did you ask your hoster if there is mod_security or any other web application firewall or intrusion protection system enabled?