DISREGARD ALL THE "**". I had to use them in order to jump the spam filters
I'm putting up a site that is electr**onic ciga**rette related.
But I just found out that performing certain searches using the term "electr**onic ciga**rette" on my site return a 412 error.
Doing a search for "electr**onic cigar**ette" alone is no problem. It's only when I select a currency after conducting that search.
So when I do a search for "electr**onic ciga**rette" the URL looks like this...
example.com/?s=electr**onic+ciga**rette and that does not return a 412 error.
But if after I conduct that search with that "electr**onic ciga**rette" keyword and THEN select a currency, the URL looks like this...
example.com/?&s=electr**onic+ciga**rette¤cy=[GBP] and returns the 412 server error. (It doesn't matter which currency is selected, that's just an example.)
I figured out after an hour of testing that it is Mod Security causing this. When I turn Mod Sec off, the problem goes away. Apparently Mod Sec is configured to block some searches with the term "electr**onic ciga**rette", which is understandable since the industry has been plagued with spammers and the link in the past when electr**onic ciga**rettes were newer.
But now this makes me wonder what other searches might possibly trigger this 412 error, and that's disheartening after all the days/hours I've put into this site!
So, I'm assuming at this point that my only option here is to turn off Mod Security? Is this correct?
- If I'm wrong, then what are my other options?
- If I'm right, then what are the major downfalls of having Mod Sec turned off? How big of a deal is it to turn Mod Security off? There seems to be a lot of conflict on the internet as to whether Mod Sec is worth running on your site or not.
Also, so you know, setting Mod Sec to "detect mode" is no different, I still get the 412 error, so that's not a solution.
I'm putting up a site that is electr**onic ciga**rette related.
But I just found out that performing certain searches using the term "electr**onic ciga**rette" on my site return a 412 error.
Doing a search for "electr**onic cigar**ette" alone is no problem. It's only when I select a currency after conducting that search.
So when I do a search for "electr**onic ciga**rette" the URL looks like this...
example.com/?s=electr**onic+ciga**rette and that does not return a 412 error.
But if after I conduct that search with that "electr**onic ciga**rette" keyword and THEN select a currency, the URL looks like this...
example.com/?&s=electr**onic+ciga**rette¤cy=[GBP] and returns the 412 server error. (It doesn't matter which currency is selected, that's just an example.)
I figured out after an hour of testing that it is Mod Security causing this. When I turn Mod Sec off, the problem goes away. Apparently Mod Sec is configured to block some searches with the term "electr**onic ciga**rette", which is understandable since the industry has been plagued with spammers and the link in the past when electr**onic ciga**rettes were newer.
But now this makes me wonder what other searches might possibly trigger this 412 error, and that's disheartening after all the days/hours I've put into this site!
So, I'm assuming at this point that my only option here is to turn off Mod Security? Is this correct?
- If I'm wrong, then what are my other options?
- If I'm right, then what are the major downfalls of having Mod Sec turned off? How big of a deal is it to turn Mod Security off? There seems to be a lot of conflict on the internet as to whether Mod Sec is worth running on your site or not.
Also, so you know, setting Mod Sec to "detect mode" is no different, I still get the 412 error, so that's not a solution.
Comment