[Plugin: BulletProof Security] BPS Security Conflicts With A Plugin

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter castaholla

    (@castaholla)

    11 years, 8 months ago

    you can see it here: http://www.ml33913.com/realestate/

    Run any query and you see the 403 error. Now, when I deactivate it, it works just fine.

    Plugin Author AITpro

    (@aitpro)

    11 years, 8 months ago

    The Square Brackets / ASCII %5B and %5D characters are being blocked in your Query string for this plugin.

    ?pclass%5B%5D=1&sortby=Price&sorttype=DESC&action=searchresults&action=searchresults&page_id=1015

    You will need to modify these BPS security filters in your Root .htaccess file.

    Before modification
RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|%3c|%3e|%5b|%5d).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(\x00|\x04|\x08|\x0d|\x1b|\x20|\x3c|\x3e|\x5b|\x5d|\x7f).* [NC,OR]

After modification
RewriteCond %{QUERY_STRING} ^.*(\(|\)|<|>|%3c|%3e).* [NC,OR]
RewriteCond %{QUERY_STRING} ^.*(\x00|\x04|\x08|\x0d|\x1b|\x20|\x3c|\x3e|\x7f).* [NC,OR]
    Thread Starter castaholla

    (@castaholla)

    11 years, 8 months ago

    that did the trick. Thank you so much!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[Plugin: BulletProof Security] BPS Security Conflicts With A Plugin’ is closed to new replies.