Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: German_AC on November 30, 2013, 10:56:35 PM

Title: Weird thing when using the word "viagra" on 2.0.6
Post by: German_AC on November 30, 2013, 10:56:35 PM
Hi guys, I know it sounds stupid, but recently we migrated a forum fromp phpbb3 to SMF 2 with the converter. Everything worked great, and the new installation works fine, until one of the admins reported a funny -but so weird- problem.

He was joking with a member about viagra, and he couldnt post the comment he was writing. After trying several times he gave up. I was trying to figure what was the issue, and just to try thing removed the word "viagra" of the message and it worked normally.

The concrete problem is, if you write a post including the word, and you try to preview or post, it redirects to the index without posting anything. If you remove the word, it works fine, you can see the preview and post the comment.

We have no censored words on the admin panel, so we can't figure it out.


Any clues?
Title: Re: Weird thing when using the word "viagra" on 2.0.6
Post by: Arantor on November 30, 2013, 10:58:16 PM
This is nothing to do with SMF. This is a thing called mod_security, installed on your server to try to cut down on bad things.

Ask your host to disable it.
Title: Re: Weird thing when using the word "viagra" on 2.0.6
Post by: kat on December 01, 2013, 11:38:40 AM
To prove that, you might have phun trying to post the word "Casino" and that kinda thing, too.

mod_security is stooopid.
Title: Re: Weird thing when using the word "viagra" on 2.0.6
Post by: German_AC on December 01, 2013, 06:19:24 PM
Thank you guys! Is there any way to check if this "mod_security" is installed on the server?

I tried "Casino" and this word pass trough. Also tried "cialis" with the same result. Stupid thing...
Title: Re: Weird thing when using the word "viagra" on 2.0.6
Post by: Arantor on December 01, 2013, 06:27:42 PM
The symptoms you're describing are clear that mod_security is installed, but not ideally configured. mod_security is just a rules filter, looking for things that are not welcome, it is up to the host how they configured it. Your host has configured it less than ideally.

Ask them to turn it off.