What is your server running (versions)?
Vger
What is your server running (versions)?
Vger
CENTOS 5.5 x86_64 standard, and the most recent version of ZenCart - it was a clean install this past fall. I was using osCommerce before that and did not experience this problem (I still prefer ZenCart, mind you - just saying).
Apache/2.2.16 (Unix)
Default PHP Version (.php files) 5
PHP 5 Handler suphp
PHP 4 Handler none
Apache suEXEC on
Last edited by aloeroot; 8 Dec 2010 at 09:38 PM. Reason: Adding apache version etc
Why are you running both SuExec and SuPHP?
You would normally run one or the other but not both, or you may run one of them and then "harden" with SuHosin.
Vger
SuEXEC is for cgi scripts, and SuPHP for php, so it does make sense to run both of them. You might be thinking of suPHPexec, which we're not using.
...and so the next question has to be:
Are you running PHP as a CGI or as an Apache module?
Vger
As an Apache module.
Just as a suggestion - why not try running PHP as a CGI, just using SuExec, and (if you still need to) disabling mod_security.
Running PHP as a CGI is far more secure than running it as an Apache module, and if you feel you need more security then you could always harden it with SuHosin. Though Suhosin did create problems with Who's Online in earlier versions of Zen Cart and you will probably have to disable session encryption in SuHosin to prevent those problems.
Other than suggesting that I really cannot see why you are having this problem if, as you say, you disabled mod_security and the problem persisted.
Vger