Weird Apache error

Portal Home > Knowledgebase > Articles Database > Weird Apache error

Posted by tlsuess, 04-03-2009, 11:01 PM
Hey everyone, It might be some simple fix in the Apache config or it could be something else. I am trying to help a client out with a problem in Apache. Whenever you have an HTML form POSTing data through Apache, if any input box or text area contains an "" tag (case insensitive) it will throw a "400 Bad Request" error. Anything else seems to work (even other tags) and doesn't give me errors. Is this a simple fix? I was scoping the Apache 2.0 docs and I'm not sure if it's Content Negotiation. I wouldn't think so since this is POSTing data and not Apache serving a page from the server-side. Thanks, Todd
Posted by everity, 04-03-2009, 11:10 PM
Do you have mod_security installed?
Posted by tlsuess, 04-03-2009, 11:16 PM
Yes, mod_security2 is installed. Does it block any data that uses HTML tags?
Posted by everity, 04-03-2009, 11:23 PM
It can, yes.
Posted by tlsuess, 04-03-2009, 11:36 PM
Should I just remove it from the modules list in the config? Or can the mod be configured to accept HTML tags?
Posted by everity, 04-03-2009, 11:47 PM
It can be configured. I am not expert enough with mod_security directives to feel comfortable giving specific advice, but if you were to post this is in the Security/Technical issues forum I am sure someone could give you the exact instructions for allowing html tags without compromising security too much.
Posted by tlsuess, 04-04-2009, 12:22 AM
I'll try reading through the docs for it too. Thanks for all your help!
Posted by Tyl3r, 04-04-2009, 09:39 AM
Look at the error log for hints.