[Tickets #6272] Re: Error when saving mail options

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=6272
-----------------------------------------------------------------------
 Ticket             | 6272
 Updated By         | patrick at computica.com
 Summary            | Error when saving mail options
 Queue              | Horde Base
 Version            | 3.1.5
 Type               | Bug
 State              | Feedback
 Priority           | 2. Medium
 Milestone          | 
 Patch              | 
 Owners             | 
-----------------------------------------------------------------------


patrick at computica.com (2008-02-15 16:51) wrote:

> I'm guessing you're using something like mod_security. Check your 
> apache logs.

It's definitely mod_security, after disabling it completely the error went
away, but I'm not sure what it is interferring with.  Here is the line from
the apache error log.

[Fri Feb 15 13:20:53 2008] [error] [client xxx.xxx.xxx.xxx] ModSecurity:
Access denied with code 400 (phase 2). Pattern match
"\\\\%(?!$|\\\\W|[0-9a-fA-F]{2}|u[0-9a-fA-F]{4})" at ARGS:time_format. [id
"950107"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"]
[hostname "webmail.domain.com"] [uri "/services/prefs.php"] [unique_id
"@y-3RH8AAAEAAG6hfG4AAAAA"]