The LimeSurvey Fund-Raiser 2012 is complete. Thank you for donating a total of 25,000 USD!     List of donors »
Welcome, Guest
Username: Password: Remember me
Forgot your password? Forgot your username?

TOPIC: Multiple choice questions not working!

Re:Multiple choice questions not working! 2 years 7 months ago #50834

  • peteb
  • peteb's Avatar
  • OFFLINE
  • Fresh Lemon
  • Posts: 5
  • Karma: 0
Thanks I'll take a look at that.
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #50845

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5116
  • Thank you received: 261
  • Karma: 240
peteb wrote:
Thanks I'll take a look at that.
Please get back wih your experience afterwards.

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #50995

  • peteb
  • peteb's Avatar
  • OFFLINE
  • Fresh Lemon
  • Posts: 5
  • Karma: 0
Hi Mazi

Looks like it is something to do with the mod_security. According to my host the mod_security log shows the following error on scripts/jquery/jquery.cookie.js .
Access denied with code 406 (phase 2). Pattern match "(?:\b(?:on(?:(?:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)|key(?:press|down|up)|c(?:hange|lick)|s(?:elec|ubmi)t|(?:un)?load|dragdrop|resize|focus|blur)\b\W*?=|abort\b)|(?:l(?:owsrc\b\W*?\b(?:(?:java|vb)script|shell)|ivescript)|(?:href|url)\b\W*?\b(?:(?:j ..." at REQUEST_FILENAME. [line "65"] [id "950004"] [msg "Cross-site Scripting (XSS) Attack. Matched signature <.cookie>"] [severity "CRITICAL"][/quote] My host is recommending I don't disable mod_security. Any idea on what else I can do to get this working without the error? Thanks Pete[file "/usr/local/apache/conf/modsec2.user.conf"] [line "65"] [id "950004"] [msg "Cross-site Scripting (XSS) Attack. Matched signature <.cookie>"] [severity "CRITICAL"]

My host is recommending I don't disable mod_security.

Any idea on what else I can do to get this working without the error?

Thanks

Pete
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #50996

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5116
  • Thank you received: 261
  • Karma: 240
I don't know if you can configure mod_security to not filter some files but without these files Limesurvey won't run properly.
So if there is no possibility to change config settings you should turn it off.

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #51000

  • peteb
  • peteb's Avatar
  • OFFLINE
  • Fresh Lemon
  • Posts: 5
  • Karma: 0
Also found this post on the mod security site - posted after Drupal noticed the jquery cookie file was being blocked: www.modsecurity.org/tracker/browse/CORERULES-29

I've asked the host to confirm what version they are running. Hopefully if they need to upgrade it will stop the error.
Last Edit: 2 years 7 months ago by peteb.
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #51007

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5116
  • Thank you received: 261
  • Karma: 240
Ahh, thanks for catching up on this. Hopefully this will be solved in the future.

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #51079

  • peteb
  • peteb's Avatar
  • OFFLINE
  • Fresh Lemon
  • Posts: 5
  • Karma: 0
Hi Mazi.

Just to conclude this, my host has commented out the rule in mod_security and everything is working fine.
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 7 months ago #51082

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5116
  • Thank you received: 261
  • Karma: 240
You're welcome!

If our hints have been helpful and you enjoy limesurvey please consider a donation to the team .
We do all this in our free time and you don't have to pay a penny for this software.

Without your help we can't keep this project alive.

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 6 months ago #51372

Hi, This is how our host solved this issue: I don´t understand any of it but now it works anyway B)

Remove the mod_security rule from config (mod_sec/apache config) or disable
mod_Security via .htaccess. For some reason we could not disable via .htaccess
so we just removed the rule from mod-sec config.

Search apache error_log after jquery.cookie.js and you will find details.

ModSecurity: Access denied with code 406 (phase 2).
Pattern match ....."a lot of stuff, can't post it here, will be blocket in helpdesk etc"....
[id "950004"] [msg "Cross-site Scripting (XSS) Attack. Matched signature " ] [severity "CRITICAL"] [hostname "web04.wopsa.se"] [uri "/lime/scripts/jquery/j
query.cookie.js"] [unique_id "TMWCcFV2zh4AABi1fU0AAAAM"]
The administrator has disabled public write access.

Re:Multiple choice questions not working! 2 years 6 months ago #51594

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5116
  • Thank you received: 261
  • Karma: 240
Thanks for your feedback!

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.
Moderators: DenisChenu, ITEd
Time to create page: 0.202 seconds
Donation Image