<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8" /><meta http-equiv="Content-Type" content="text/html charset=utf-8" class="" /></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Mod security and the community rules haslve caused so much trouble for vtiger, that I disabled it for the vtiger virtual host. <br>
I would appreciate a good vtiger rule set though :) <br>
It's still worth having it enabled globally though, so that the other virtual hosts are protected and the usual directories for attacks like cgi and tmp <br><br><div class="gmail_quote">On March 25, 2016 9:24:11 PM GMT+08:00, Manuel Fernando <ptdesigner@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Appears to be caused by a false-positive<div class=""><br class="" /></div><div class=""><br class="" /></div><div class="">A good info about this can be found here: <a href="http://blog.modsecurity.org/2007/02/handling-false.html" class="">http://blog.modsecurity.org/2007/02/handling-false.html</a></div><div class=""><br class="" /></div><div class="">Still looking for the cause of what is triggering this false-positive</div><div class="">Inspecting Products and Contacts modules.</div><div class=""><br class="" /></div><div class=""><br class="" /></div><div class="">Best Regards.</div><div class="">Manuel</div><div class=""><br class="" /></div><div class=""><br class="" /></div><div class=""><br class="" /><div><blockquote type="cite" class=""><div class="">No dia 25/03/2016, às 13:12, Manuel Fernando <<a href="mailto:ptdesigner@gmail.com" class="">ptdesigner@gmail.com</a>> escreveu:</div><br class="Apple-interchange-newline" /><div class=""><div style="word-wrap:
break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Yes, you are right, it´s not php limits.<div class=""><br class="" /></div><div class="">And no custom code, workflows and no errors.<br class="" /><div class=""><br class="" /></div><div class="">It´s more related to mod security Roule ID 240890</div><div class=""><br class="" /></div><div class="">Not easy to find information about that roule ID</div><div class=""><br class="" /></div><div class=""><br class="" /></div><div class=""><br class="" /></div><div class="">Best Regards</div><div class="">Manuel</div><div class=""><br class="" /></div><div class=""><br class="" /><div class=""><blockquote type="cite" class=""><div class="">No dia 25/03/2016, às 04:32, Sutharsan Jeganathan <<a href="mailto:ajstharsan@gmail.com" class="">ajstharsan@gmail.com</a>> escreveu:</div><br class="Apple-interchange-newline" /><div class=""><div dir="ltr" class=""><div class=""><div class=""><div
class=""><div class=""><div class="">Hi<br class="" /><br class="" /></div>It cannot be a php limit since you have less than 1000 fields in your form.<br class="" /><br class="" /></div><div class="">Have you enabled customer portal? If so what is its URL?<br class="" /><br class="" /></div><div class=""><br class="" /></div>Also Check whether any customization have been done in your CRM. <br class="" /><br class="" />Also check whether any workflow custom function is running which is triggered through full create form only, not quick create(if the field is not in quick create). In this case contact will be created then error is shown.<br class="" /><br class="" />It can happen if vtiger web service is called somewhere, probably with Query type (such as 'SELECT id FROM Contacts'). <br class="" /><br class="" /></div>Also you need to check any customization at After or before save events of contacts.<br class="" /><br class="" /><br class="" /></div>Thanks<br class=""
/></div>Sutharsan Jeganathan<br class="" /></div><div id="DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2" class=""><br class="" />
<table style="border-top:1px solid #aaabb6" class=""><tbody class=""><tr class=""><td style="width:55px;padding-top:18px" class=""><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=oa-2115-v2-c" target="_blank" class=""><img src="https://ipmcdn.avast.com/images/2016/icons/icon-envelope-tick-round-orange-v1.png" class="" /></a></td><td style="width:470px;padding-top:20px;color:#41424e;font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px" class="">No threats detected. <a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=oa-2115-v2-c" target="_blank" style="color:#4453ea" class="">www.avast.com</a>
</td></tr></tbody></table><a href="x-msg://4/#DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1" class=""></a></div><div class="gmail_extra"><br class="" /><div class="gmail_quote">On Thu, Mar 24, 2016 at 10:47 PM, Manuel Fernando <span dir="ltr" class=""><<a href="mailto:ptdesigner@gmail.com" target="_blank" class="">ptdesigner@gmail.com</a>></span> wrote:<br class="" /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class="">Hello, <div class=""><br class="" /></div><div class="">just for reference.</div><div class=""><br class="" /></div><div class="">I have no access to logs.</div><div class=""><br class="" /></div><div class="">I was inspecting and i found that tickets for example are ok because they only have in full mode about 13 fields.</div><div class="">In contacts and products, are more than 32 fields.</div><div class=""><br class="" /></div><div class="">This
could be related to any php limit inputs?</div><div class=""><br class="" /></div><div class="">Best Regards</div><div class=""><br class="" /></div><div class=""><blockquote type="cite" class=""><div class="">No dia 23/03/2016, às 10:31, Alan Bell <<a href="mailto:alan.bell@libertus.co.uk" target="_blank" class="">alan.bell@libertus.co.uk</a>> escreveu:</div><br class="" /><div class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
what is the error in the apache log which you can find at
/var/log/apache2/error.log and/or /var/log/apache2/access.log<br class="" />
<br class="" />
is your vtiger installed in the root of the server, so
<a href="http://myserver.com/index.php" target="_blank" class="">myserver.com/index.php</a> is the right place or is it in a subdirectory
<a href="http://myserver.com/vtiger/index.php" target="_blank" class="">myserver.com/vtiger/index.php</a> because if so then in config.inc.php
your path is probably wrong.<br class="" />
<br class="" />
Alan.<br class="" />
<br class="" />
<div class="">On 22/03/16 10:51, Manuel Fernando
wrote:<br class="" />
</div>
<blockquote type="cite" class="">
<br class="" />
Does anyone faced this situation?
<div class="">This happens when Contact is being created or try to
edit existing Contact. Same for Organizations</div>
<div class="">Doesn’t occur if contact is created from quick
create</div>
<div class=""><br class="" />
</div>
<div class="">This method was tested to check if mod_rewrite is
properly configured and seems mod_rewrite is working</div>
<div class=""><a href="https://docs.bolt.cm/howto/making-sure-htaccess-works" target="_blank" class="">https://docs.bolt.cm/howto/making-sure-htaccess-works</a></div>
<div class=""><br class="" />
<div class="">
<h1 class="">Forbidden</h1><p class="">You don't have permission to access /index.php
on this server.</p><p class="">Additionally, a 403 Forbidden
error was encountered while trying to use an ErrorDocument
to handle the request.</p>
<div class=""><br class="" />
</div>
</div>
</div>
<div class=""><br class="" />
</div>
<div class=""><br class="" />
</div>
<div class="">Best Regards.</div>
<div class="">Manuel</div>
<br class="" />
<fieldset class=""></fieldset>
<br class="" />
<pre class="">_______________________________________________
<a href="http://www.vtiger.com/" target="_blank" class="">http://www.vtiger.com/</a></pre>
</blockquote>
<br class="" />
</div>
_______________________________________________<br class="" /><a href="http://www.vtiger.com/" target="_blank" class="">http://www.vtiger.com/</a></div></blockquote></div><br class="" /></div><br class="" />_______________________________________________<br class="" />
<a href="http://www.vtiger.com/" rel="noreferrer" target="_blank" class="">http://www.vtiger.com/</a><br class="" /></blockquote></div><br class="" /></div>
_______________________________________________<br class="" /><a href="http://www.vtiger.com/" class="">http://www.vtiger.com/</a></div></blockquote></div><br class="" /></div></div></div></div></blockquote></div><br class="" /></div><p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br /><a href="http://www.vtiger.com/">http://www.vtiger.com/</a></pre></blockquote></div><br>
-- <br>
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.</body></html>