Post by aaaa5 » Fri Sep 26, 2008 3:34 pm

Please help me with this messege eror.

I use open cart in my website and now when i whan to save some changes in admin page my host block my IP because the host company add some new rules for security.

Does anyone know how to use the opencart without being blocked IP address from the host server ???

Code: Select all

[Wed Sep 24 13:48:36 2008] [error] [client 89.42.216.5] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\b(?:(?:s(?:ys(?:(?:(?:process|tabl)e|filegroup|object)s|c(?:o(?:nstraint|lumn)s|at)|dba|ibm)|ubstr(?:ing)?)|user_(?:(?:(?:constrain|objec)t|tab(?:_column|le)|ind_column|user)s|password|group)|a(?:tt(?:rel|typ)id|ll_objects)|object_(?:(?:nam|typ)e|id)| ..." at REQUEST_FILENAME. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "69"] [id "950904"] [msg "Blind SQL Injection Attack. Matched signature <user_group>"] [severity "CRITICAL"] [hostname "site.domain.com"] [uri "/admin/javascript/JSCookMenu/default/user_group.png"] [unique_id "SNobBMHijJ4AAHZSpskAAAAQ"] [Wed Sep 24 13:48:38 2008] [error] [client 89.42.216.5] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\b(?:(?:s(?:ys(?:(?:(?:process|tabl)e|filegroup|object)s|c(?:o(?:nstraint|lumn)s|at)|dba|ibm)|ubstr(?:ing)?)|user_(?:(?:(?:constrain|objec)t|tab(?:_column|le)|ind_column|user)s|password|group)|a(?:tt(?:rel|typ)id|ll_objects)|object_(?:(?:nam|typ)e|id)| ..." at REQUEST_FILENAME. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "69"] [id "950904"] [msg "Blind SQL Injection Attack. Matched signature <user_group>"] [severity "CRITICAL"] [hostname "site.domain.com"] [uri "/admin/javascript/JSCookMenu/default/user_group.png"] [unique_id "SNobBsHijJ4AAHa6hckAAAAV"] [Wed Sep 24 13:48:42 2008] [error] [client 89.42.216.5] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\b(?:(?:s(?:ys(?:(?:(?:process|tabl)e|filegroup|object)s|c(?:o(?:nstraint|lumn)s|at)|dba|ibm)|ubstr(?:ing)?)|user_(?:(?:(?:constrain|objec)t|tab(?:_column|le)|ind_column|user)s|password|group)|a(?:tt(?:rel|typ)id|ll_objects)|object_(?:(?:nam|typ)e|id)| ..." at REQUEST_FILENAME. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "69"] [id "950904"] [msg "Blind SQL Injection Attack. Matched signature <user_group>"] [severity "CRITICAL"] [hostname "site.domain.com"] [uri "/admin/javascript/JSCookMenu/default/user_group.png"] [unique_id "SNobCsHijJ4AAHdldeYAAAAB"] [Wed Sep 24 13:48:54 2008] [error] [client 89.42.216.5] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\b(?:(?:s(?:ys(?:(?:(?:process|tabl)e|filegroup|object)s|c(?:o(?:nstraint|lumn)s|at)|dba|ibm)|ubstr(?:ing)?)|user_(?:(?:(?:constrain|objec)t|tab(?:_column|le)|ind_column|user)s|password|group)|a(?:tt(?:rel|typ)id|ll_objects)|object_(?:(?:nam|typ)e|id)| ..." at REQUEST_FILENAME. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "69"] [id "950904"] [msg "Blind SQL Injection Attack. Matched signature <user_group>"] [severity "CRITICAL"] [hostname "site.domain.com"] [uri "/admin/javascript/JSCookMenu/default/user_group.png"] [unique_id "SNobFsHijJ4AAHZLcQMAAAAH"]
Last edited by hm2k on Tue Nov 11, 2008 10:59 pm, edited 1 time in total.

Newbie

Posts

Joined
Mon Sep 22, 2008 7:16 pm

Post by Qphoria » Fri Sep 26, 2008 6:18 pm

Get a new host or contact them

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by aaaa5 » Fri Sep 26, 2008 6:52 pm

other opinions ??


to take another host should be made a variety of settings to other sites (subdomain, and the mail server at my office), so understand the need for help

Qphoria wrote: Get a new host or contact them

Newbie

Posts

Joined
Mon Sep 22, 2008 7:16 pm

Post by Qphoria » Fri Sep 26, 2008 6:55 pm

Yes the other option was to contact your host

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by tea4tamara » Tue Nov 04, 2008 3:26 am

I am having the same problem, apparently OpenCart has some sort of script that causes my host to block my IP address. Does anyone know what's going on and how to fix this problem? I don't think that my client will switch hosts, and I don't want to start again with a new shopping cart program.

Newbie

Posts

Joined
Wed Aug 20, 2008 9:21 am

Post by tea4tamara » Tue Nov 11, 2008 9:21 pm

I'm not as technically advanced as I'd like to be, so I'm not sure what you mean (and it kills me to say that, because I like to think that I'm brilliant ha ha). The problems happen when I'm adding new information to the database through the admin section -- so what do I need to change to allow this to happen without getting blocked by my web host?

Newbie

Posts

Joined
Wed Aug 20, 2008 9:21 am

Post by JNeuhoff » Fri Nov 14, 2008 11:10 pm

I see two issues with quite a few of the web hosting companies:

1) The PHP scripts, like the ones installed from OpenCart, run under a general shared account, such as 'apache', 'nobody', or 'ftp' (seen all of this with different hosts) which is a high security risk. You'd end up making some of OpenCart's directories, e.g. the 'cache', writeable for the public. This is usually the case when PHP runs as an Apache plugin module, rather than having it run as CGI under your own user account. The latter is slightly slower, but its secure and strongly recommended if you wish to run OpenCart scripts.

2) Many web hostings companies still use the 'register_globals = On'. I have seen webhosting companies which are unable to sort out this simple issue (e.g. mdwebhosting.com.au comes to my mind, one user on a shared host wants it on, another off, customer service keeps changing the value between on and off ...)

If your web hosting company can't meet these basic security and service standards, then its time to change over to another one. I personally recommend HostGator.

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig


User avatar
Guru Member

Posts

Joined
Wed Dec 05, 2007 3:38 am

Who is online

Users browsing this forum: No registered users and 6 guests