Problem with quick reply with 3.6.3

[pauloo]

My host have installed Iconv now.

iconv support enabled
iconv implementation glibc
iconv library version 2.3.4

and it's the same problem

[scabbed]

ok i disable the problematic Ajax Feature and it works now

I ask my host to install iconv and he says me

Unfortunately, due to the experimental nature of Iconv and PHP, we will
not be able to install this - my apologies.

[rberardo]

I will try it Steve, but it wasn't happening in 3.6.2... maybe dev team could see if they solve the problem...

I will post if your suggestion worked.

thx

[Marco van Herwaarden]

We have had 1 ticket where it was mod_security that was causing the trouble. If you are using mod_security, you might want to disable it to see if that helps with this issue.

[Marco van Herwaarden]

It seems now to be confirmed that this is a mod_security problem.

You will need to disable mod_security. If you cannot do this at the server level, make or edit your forum .htaccess file and add the following code:

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

Then upload that .htaccess file to your root forum directory.

[rberardo]

Marco, this mod_security isnt important to hacking attempts????

I did as Steve said ('Disable Problematic AJAX Functions') and the problem stopped. wich solution is the best????

thx

[Marco van Herwaarden]

From a vBulletin perspective i would say that mod_security is more often causing problems then that it stops an attack on a vulnerability, but that might be different if you also use other software on your server. Disabling Problematic AJAX function is limiting the usability of your board.

mod_security itself is hardly the problem, the problem is often in the rulesets used. If you do not know how to build a ruleset for mod_security and how to troubleshoot problems, then you only get a false sense of safety.

[obmob]

Well is there a solution or a patch for this problem?

3.6.2 had no problems with spanish/french characters

I must disable ajax to work, but i don't like it without it.

You know, it also affects the ajax shoutbox from vb.org and that... i can't disable ajax there >_<

[Marco van Herwaarden]

The real solution is to disable mod_security or to remove the offending rules from the ruleset.

[obmob]

And how to do that? i need to ask my host? oO

[Steve Machol]

See post #35.

[obmob]

See post #35.

Oh i tried that and got 500 error... i don't know how to write over an existing htaccess

My htaccess has some subdomains in it and also some blocked ips

[Steve Machol]

You need to add that code to your existing .htaccess file. If it doesn't work, then this is a server issue and you will need to contact your host for a solution.

[obmob]

And all i need to do is add the code, it doen't matter if there is code insided... should i add something special?

[Steve Machol]

Yes, just add it. Sorry I didn't make that clear.