PDA

View Full Version : vbulletin_collapse cookie is not safe

Lolli
10-11-2009, 08:57 AM
The content of vbulletin_collapse cookie is not secure, and mod_security stops him. So we have problems accessing the forum. The content of this cookie is, for example: forumbit_12%0Aforumbit_38

How to solve the problem?
snakes1100
10-11-2009, 02:52 PM
Disable mod_sec or adjust its settings.
Lolli
10-11-2009, 05:04 PM
Disable mod_sec or adjust its settings.

Can not change the string in the cookie?

Decrease the security is not a good idea...
snakes1100
10-11-2009, 05:51 PM
The cookie isnt the issue, the issue is mod_sec.
Angel-Wings
10-12-2009, 05:11 AM
Take a view in the mod_sec log and create a whitelist entry
BSMedia
10-15-2009, 07:41 PM
Can not change the string in the cookie?

Decrease the security is not a good idea...

Mod_sec isn't doing anything to help you secure your server.
Marco van Herwaarden
10-21-2009, 11:09 AM
And what is in your opinion insecure about that cookie? :confused:

The others are correct, there is a rule set in your mod_security config that is blocking this and that is really not needed for security at all.
TheLastSuperman
10-21-2009, 12:26 PM
And what is in your opinion insecure about that cookie? :confused:

The others are correct, there is a rule set in your mod_security config that is blocking this and that is really not needed for security at all.

Listen to this man 99% of the time and your set (WHAT?! I had to throw in the 1% error rate lol)

Call your host, get a Server Admin on the phone and tell him what's going on, he can review the mod_sec's and see what might be causing the problem. If your using HostGator goodness man they have more enabled then I have ever seen so every host is different and vBa CMPS and vBa Links I know from experience will not work properly on HostGator until you call and have a chat with them ;).

S-MAN