Tickets :: [#6272] Error when saving mail options

6.0.0-alpha12

6/3/25

Summary	Error when saving mail options
Queue	Horde Base
Queue Version	3.1.5
Type	Bug
State	Not A Bug
Priority	2. Medium
Owners
Requester	patrick (at) computica (dot) com
Created	02/15/2008 (6318 days ago)
Due
Updated	02/15/2008 (6318 days ago)
Assigned	02/15/2008 (6318 days ago)
Resolved	02/15/2008 (6318 days ago)
Milestone
Patch	No

02/15/2008 10:04:52 PM	patrick (at) computica (dot) com	Comment #5	Reply to this comment
unique_id is just a cache buster, not any kind of attack. You need to either file a mod_security bug, disable it, or remove just that rule. Cool, appreciate the help.

02/15/2008 10:03:54 PM	Chuck Hagenbuch	Comment #4 State ⇒ Not A Bug	Reply to this comment
unique_id is just a cache buster, not any kind of attack. You need to either file a mod_security bug, disable it, or remove just that rule.

02/15/2008 09:51:37 PM	patrick (at) computica (dot) com	Comment #3	Reply to this comment
I'm guessing you're using something like mod_security. Check your apache logs. It's definitely mod_security, after disabling it completely the error went away, but I'm not sure what it is interferring with. Here is the line from the apache error log. [Fri Feb 15 13:20:53 2008] [error] [client xxx.xxx.xxx.xxx] ModSecurity: Access denied with code 400 (phase 2). Pattern match "\\\\%(?!$\|\\\\W\|[0-9a-fA-F]{2}\|u[0-9a-fA-F]{4})" at ARGS:time_format. [id "950107"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [hostname "webmail.domain.com"] [uri "/services/prefs.php"] [unique_id "@y-3RH8AAAEAAG6hfG4AAAAA"]

02/15/2008 09:33:40 PM	Chuck Hagenbuch	Comment #2 State ⇒ Feedback	Reply to this comment
I'm guessing you're using something like mod_security. Check your apache logs.

02/15/2008 09:27:21 PM	patrick (at) computica (dot) com	Comment #1 Priority ⇒ 2. Medium Type ⇒ Bug Summary ⇒ Error when saving mail options Queue ⇒ Horde Base State ⇒ Unconfirmed	Reply to this comment
When logged into horde and after clicking Options > Mail > Mailbox and Folder Display Options, the users on our server are unable to save anything they change. We get an error: Bad Request Your browser sent a request that this server could not understand. Apache/2.2.0 (Fedora) Server at webmail.domain.com Port 80 Any help is appreciated.