security image causes server error

[amberaudio]

Script URL:http://www.perfectpashmina.co.uk/links.php
Version of script:1.7
Hosting company:pipeten.co.uk
URL of phpinfo.php:http://www.perfectpashmina.co.uk/phpinfo.php
URL of session_test.php:http://www.perfectpashmina.co.uk/session_test.php
What terms did you try when SEARCHING for a solution:Internal script error. Wrong session parameters! security image

Write your message below:

Hi everyone

It's working fine for external submissions with the security image option disabled, but as soon as it's enabled I get a server error 500 (sorry, no further info about the error at the moment). Also, with debug on I occasionally ( but not always ) get the session parameters error.

Also when submitting from the admin side it appears to work fine ( ie no errors) but it's not writing to the linkinfo file. This is independent of the security image setting.

I've left security image enbled for now so that you can hopefully see the problem in action!

Thanks

Alan

[Klemen]

Turn $settings['debug'] to 1 in settings.php file and enable security image then see if you get any new errors.

Without more info about the error I'm afraid I won't be able to help.

[amberaudio]

Hi Klemen

Thanks for your reply. I've done what you suggested but I haven't got any more info. I've sent a support ticket to see if my host can shed any more light on waht's happening. In the meantime I'm wondering if the two problems are related or if it's just a coincidence. Looking at the code in admin it appears that there is a check to see if the file is writeable at line 1101, so presumably if I'm not getting an error there it means that the script is writing to the file, but that it is writing an empty string?

[amberaudio]

Hi again

Just to let you know I received the following reply from support, and they have applied a work around;

"A: Hi Alan,
This was due to mod_security not liking the http:// urls (see http://www.pipeten.info/index.php/2007/ ... -security/ for further info)."

Anyway it's all working for me now, hopefully this might help someone else in the future!

[Klemen]

It was obviously a problem in their mod_security settings, I'm running mod_security myself on several servers without problems

Anyway, glad it works now.