[Radiant] Bug or feature?!

[Jake Liddell]

I think it's actually the mkdir that's the problem.  My host (textdrive)
uses mod_security.  If you're hosting via Appache you can set up particular
rules to be ignored via the .htaccess file.  However, if you're passing
through requests to lighttpd you can't switch it off at a rule level.  

Textdrive will allow you to disable it altogether, but I haven't done that
just yet, as I'm assuming it might be useful, if it doesn't get in the way
too much.  I've got round this particular problem by just using English
instead of code "Create a directory called radiant", and assuming the punter
is bright enough to work it out!

Cheers,
Jake.

-----Original Message-----
From: radiant-bounces at lists.radiantcms.org
[mailto:radiant-bounces at lists.radiantcms.org] On Behalf Of Daniel Sheppard
Sent: 29 August 2006 02:15
To: radiant at lists.radiantcms.org
Subject: Re: [Radiant] Bug or feature?!

> > Is this some strange anti-script-injection measure, or is 
> it just a  
> > weird bug?  What's it actually testing for?
> This would be due to your hosting provider, its a common way to try  
> to reduce spam/cracking attacks. All these checks happen before  
> Radiant ever sees your request, so there isn't much that can be done  
> on that end. Try contacting the company you get web-space from.

Another way around it might be to replace some of your string with
entity declarations, ie.

mkdir radiant

If you're really lucky, you might be able to get away with just
replacing the space (mkdir radiant) which wont destroy the
readability so much.

_______________________________________________
Radiant mailing list
Radiant at lists.radiantcms.org
http://lists.radiantcms.org/mailman/listinfo/radiant

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.11.6/428 - Release Date: 25/08/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.11.6/428 - Release Date: 25/08/2006