Developers Tool Kit Problem

[frank18]

Old thread but still valid

What are you searching for? Sometimes the strings in the search are an issue


~Melanie

Learned this the hard way today

On a 1.5.4 install I was looking for the phrase 'if (preg_match(' (without the quotes) in DTK and promptly got error 403 - access denied. All I can say: security works!

But before I got there I thought 'WTF, are file or folder permissions changed? Did some .htaccess files change?' etc etc

So, I reset permissions of all *.php files to 644 (except for the 2 configure.php files), checked that all folders are 755 or 777 if required, checked the .htaccess files >> all good! Tried again, same result - until I got to this post and it clicked.

Next search was just for 'preg_match' and bingo!

Thanks Melanie, only shows that we are never too old to learn something new!

[DrByte]

On a 1.5.4 install I was looking for the phrase 'if (preg_match(' (without the quotes) in DTK and promptly got error 403 - access denied. All I can say: security works!

Yup, that's mod_security on your server ... simply preventing things that hackers might try to use to damage the server.

If it causes a problem for you, you'll need to negotiate with your hosting company to have them disable that security rule for your site.

[frank18]

Yup, that's mod_security on your server ... simply preventing things that hackers might try to use to damage the server.

If it causes a problem for you, you'll need to negotiate with your hosting company to have them disable that security rule for your site.

Thanks DrByte - no, it does not cause any problems at all, just needed to widen the search a bit. And yes, good to see that my server people are on the ball!

[mc12345678]

Sort of thinking around the corner, seeing that 'preg_match' worked and 'if (preg_match(' would throw an error, if the number of results were still "too" long, then could try 'f (preg_match' at least that way don't have the test statement of if, and don't have the opening parethesis for the preg_match function, but do have the end of the if statement (or possibly other functions such as sprintf) and do therefore "narrow" down the results.

That way don't have to request a modification to the security system and still able to mostly search on the desired phrase. Will say that for some reason, one result came back from the above when there was no space between f and (, but several when there was a space.