MG 2.3 Unable to upload to XFMG when mod_sec enabled for the domain

C

chris26237

New member
Hello,
I'm not sure if this is a post about a vulnerability or bug. I am able to successfully upload media files in XF posts when mod_sec is enabled for the domain. However, I am not able to upload those same files to XFMG under the same conditions. Only when I turn off mod_sec for the domain (all other conditions remaining the same), the files are able to be uploaded to XFMG.

I'm approaching this as an issue with XFMG handling images differently than XF with respect to mod_sec settings on the server. Instead of me making changes to the server, wouldn't this be fixed as a bug in the application?

Thanks much for in advance for your attention to this.
 
Last edited:
Solution
Jeremy P
You should check your server logs to identify what rule is being triggered. It will almost certainly just be a false positive from an overzealous rule that is incompatible with XF.
Sort by date Sort by votes
You should check your server logs to identify what rule is being triggered. It will almost certainly just be a false positive from an overzealous rule that is incompatible with XF.
 
Upvote 0 Downvote
Solution
You must log in or register to reply here.
Back
Top Bottom