Tickets :: [#6272] Error when saving mail options

6.0.0-RC7

6/29/26

History
Attachments
Comment
Watch
Download

Summary	Error when saving mail options
Queue	Horde Base
Queue Version	3.1.5
Type	Bug
State	Not A Bug
Priority	2. Medium
Owners
Requester	patrick (at) computica (dot) com
Created	2/15/08 (6709 days ago)
Due
Updated	2/15/08 (6709 days ago)
Assigned	2/15/08 (6709 days ago)
Resolved	2/15/08 (6709 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

5210	patrick (at) computica (dot) com	Comment #5	Reply to this comment
unique_id is just a cache buster, not any kind of attack. You need to either file a mod_security bug, disable it, or remove just that rule. Cool, appreciate the help.

5410	Chuck Hagenbuch	Comment #4 State ⇒ Not A Bug	Reply to this comment
unique_id is just a cache buster, not any kind of attack. You need to either file a mod_security bug, disable it, or remove just that rule.

379	patrick (at) computica (dot) com	Comment #3	Reply to this comment
I'm guessing you're using something like mod_security. Check your apache logs. It's definitely mod_security, after disabling it completely the error went away, but I'm not sure what it is interferring with. Here is the line from the apache error log. [Fri Feb 15 13:20:53 2008] [error] [client xxx.xxx.xxx.xxx] ModSecurity: Access denied with code 400 (phase 2). Pattern match "\\\\%(?!$\|\\\\W\|[0-9a-fA-F]{2}\|u[0-9a-fA-F]{4})" at ARGS:time_format. [id "950107"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [hostname "webmail.domain.com"] [uri "/services/prefs.php"] [unique_id "@y-3RH8AAAEAAG6hfG4AAAAA"]

409	Chuck Hagenbuch	Comment #2 State ⇒ Feedback	Reply to this comment
I'm guessing you're using something like mod_security. Check your apache logs.

219	patrick (at) computica (dot) com	Comment #1 Priority ⇒ 2. Medium Type ⇒ Bug Summary ⇒ Error when saving mail options Queue ⇒ Horde Base State ⇒ Unconfirmed	Reply to this comment
When logged into horde and after clicking Options > Mail > Mailbox and Folder Display Options, the users on our server are unable to save anything they change. We get an error: Bad Request Your browser sent a request that this server could not understand. Apache/2.2.0 (Fedora) Server at webmail.domain.com Port 80 Any help is appreciated.