Can't administer users: Content Encoding Error

[Guy Clements]

I have a similar problem but I get no error displayed while trying to access the ACP. I can access the MCP with no issue and the board appears to have updated cleanly. I updated from 3.2.0 to 3.3.0.

[Mick]

Please start your own topic by first filling out the Support Request Template and post it back in your new topic to enable us to assist you better.

[Guy Clements]

Will do - I only added because it sounded like the same issue.

[Mick]

It’s very rare that any two issues are the same, the error may be but there are just too many combinations of installations and there’s no such thing as coincidence, thanks.

[warmweer]

As per Mick:
The problem on your board could seem the same but the cause could be completely different.
Also:

I updated from 3.2.0 to 3.3.0.

doesn't say much e.g. how did you update? (that little bit of info could already point to a possible solution).
Hence the need for the SRT.

[snipershady]

I've tested the problem with xdebug and enabling display_error
There are no PHP error reported by Xdebug
and no error in httpd/error.log

when I go to edit a profile

Code: Select all

adm/index.php?i=users&mode=overview&sid=.....

with mod security enabled
i got this error inside logs

Code: Select all

 ModSecurity: Warning. Matched phrase "</b> on line <b>" at RESPONSE_BODY. [file "/usr/share/modsecurity-crs/rules/RESPONSE-953-DATA-LEAKAGES-PHP.conf"] [line "49"] [id "953100"] [rev "3"] [msg "PHP Information Leakage"] [data "Matched Data: </b> on line <b> found within RESPONSE_BODY: <b>[phpBB Debug] PHP Warning</b>: in file <b>[ROOT]/phpbb/language/language.php</b> on line <b>313</b>: <b>vsprintf(): Too few arguments</b><br />\\x0a\\x1f\\x8b\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\xcc\\x1c\\xdbr\\xdb6\\xf6Y\\xfa\\x0a\\x84\\x9d\\xb1\\xec\\xd4\\xa2$;\\xb1k[R\\xd6\\xcd\\xa5\\xe3N\\x92z\\xeb\\xdev\\xd2\\x8c\\x07$A\\x09\\x09I0 (\\xc7\\xdevf\\x7fc\\xff`\\x1f\\xf6/\\xfa'\\xfb%{\\x0e\\x00\\xdet\\xb3\\x93\\xa6\\xb1=\\xd3\\x88\\x04\\x81s\\xc3\\xc1\\xb9\\x01\\xe8\\xf0\\xde\\x93\\xef\\x1e\\xff\\xf0\\x8f..."] [severity "ERROR"] [ver "OWASP_CRS/3.1.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "OWASP_CRS/LEAKAGE/ERRORS_PHP"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [hostname "www.XXXXXXXXXXX.com"] [uri "/forum/adm/index.php"] [unique_id "XiIasrLu4mEAADDN3kQAAAAA"]
 

I would like to remind that with 3.2.9 it was working fine with the same PHP configuration

[3Di]

Have you old language packs not up to date with phpBB 3.3.0?

[EA117]

Neat, a mod_security rule intending to block PHP errors from being present in the web server response. So if you get a PHP warning or error reported "anywhere", mod_security interrupts that and blocks the response entirely. (Well, blocks it and returns "something", which apparently results in "content encoding error." Only a LAN trace could perhaps confirm exactly what is returned, but it's not really that important.)

Agreed 100% with 3Di that the "otherwise 'normal' PHP warning" that occurred and triggered this mod_security rule looks like the kind of issues phpBB 3.3.0 users have seen when continuing to use non-phpBB 3.3.0 language packs.

[snipershady]

Yes! It was the language pack. My language (italian) is not updated for 3.3.0
I've set with last 3.3.0 british. It works perfectly

[alfi_]

I had the same/similar problem on 3.3.0, the reason looks to be in old translations (see here https://www.phpbb.com/customise/db/tran ... pic/217211, it is only in Czech, but the primary info is clear and this "patch" fixes it. Unfortunately there is no cz translation for 3.3.0 yet )
Strange behaviour is that php returns with this bug http 200 ok, nothing in the error log and the error page is only from browser, without any possibility to see/debug the http response.

[warmweer]

Unfortunately there is no cz translation for 3.3.0 yet )

Use the latest CZ language pack and copy/add all the missing language entries from the 3.3.0 en pack (and worry about the translation later).

[postcd]

I have solved this "content encoding error" OP is having, by replacing the "memberlist.php" file by one from my other forum (of same old PHPBB version), where this error not happened (or try from original package). Error log not logged any error btw.

[warmweer]

I have solved this "content encoding error" OP is having, by replacing the "memberlist.php" file by one from my other forum (of same old PHPBB version), where this error not happened (or try from original package). Error log not logged any error btw.

If the memberlist.php files were different then they weren't from the same phpBB version or were custom edited.

[Mick]

Please note this topic is four years old, the OP hasn’t been back for four years and it’s marked as solved.