Edit overall_header.html with ACP - Strange Apache error

[batfastad]

Hi guys

Just upgraded our forum to phpBB3 and everything seems to be working well.

I've been trying to modify the overall_header.html template in the subsilver2 style
I want to change the site logo code to point to a different logo stored remotely on another server

However when I change

Code: Select all

<td><a href="{U_INDEX}">{SITE_LOGO_IMG}</a></td>

To

Code: Select all

<td><a href="{U_INDEX}"><img src="http://www.domain.com/img/logo.gif" alt="Logo" title="Forum Index" border="0" /></a></td>

I get the following Apache error message:
Not Acceptable

An appropriate representation of the requested resource /forums/adm/index.php could not be found on this server.

Never seen this error before.
It seems to work fine with editing other templates (overall_footer.html) - strange why it's just this one!

Any ideas/suggestions?

Thanks, Ben

[batfastad]

Anyone got any ideas on what might be causing this?

Thanks, Ben

[Semi_Deus]

hmm, I don't think this is caused by that change, since the header logo, or an img tag have nothing to do with the ACP..

[batfastad]

I'm still trying to get to the bottom of this.
Does anyone have any further information?

I've contacted our hosting provider to see if there's anything useful in the error logs which may help narrow this down.

Thanks, B

[batfastad]

Ok I've found some more information that will hopefully help someone out, and also a fix

The following article:
http://stellify.net/406-not-acceptable- ... _security/

I added the following to the .htaccess file in the default forums/ folder

Code: Select all

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

And it worked first time!
Then not know how seriously that .htaccess change would affect server security, I commented out the .htaccess edit after I'd changed the template and it continues to work fine.

According to the article it could be down to an invalid sequence of characters in a form POST data
So there's something in that overall_header.html in subsilver2 which is causing this problem.

I will report again if I find anything else!
Hope this helps someone

Cheers, B

[ToonArmy]

Mod security probably blocks this because you are sending the server HTML which can lead to XSS attacks, but this is kinda what you want to do.

[batfastad]

But why does editing all the other templates work ok?
I only have this problem with overall_header.html

[T0ny]

Because there is something in overall_header.html that your host's configuration of mod_security is mis-identifying as a hacking attempt. Unfortunately, without access to the error log there's no way of telling what

[ToonArmy]

But why does editing all the other templates work ok?
I only have this problem with overall_header.html

Because overall_header.html has script tags in it