500 Internal Server Error
Using iJoomla Ad Agency I have come across a problem which was related to my server configuration.
In shot.
Saving a General setting or Language file through Administration is producing a 500 Internal Server Error.
iJoomla Ad Agency -> Settings -> General
or
iJoomla Ad Agency -> Settings -> Language
Server log showed that:
Access denied with code 500 (phase 2). Pattern match "((alter|create|drop)[[:space:]]+(column|database|procedure|table)|delete[[:space:]]+from|update.+set.+=)" at ARGS:filecontentFE. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "352"] [id "300015"] [rev "1"] [msg "Generic SQL injection protection"] [severity "CRITICAL"]
Which is a Mod_Security
The only solution i have found is to temporarily disable the line in mod_security configuration.
#Generic SQL sigs
SecRule ARGS "((alter|create|drop)[[:space:]]+(column|database|procedure|table)|delete[[:space:]]+from|update.+set.+=)" "id:300015,rev:1,severity:2,msg:'Generic SQL injection protection'"
To disable replace above with:
#Generic SQL sigs
#SecRule ARGS "((alter|create|drop)[[:space:]]+(column|database|procedure|table)|delete[[:space:]]+from|update.+set.+=)" "id:300015,rev:1,severity:2,msg:'Generic SQL injection protection'"
Save the settings for Ad_Agency, than immediately reverse the changes in/for mod_security rules.
Remember: mod_security is a great layer of protection for your server. If anyone telling you that mod_security is useless, they either low knowledge untalented programmers or they up to no good. Period.
Regards,
Alex
