Error Configuring Spam Protector Plugin

[gotchi]

Hi

After getting a lot of comment spams I tried to intalle Spam Protector with Spartacus.
Installation finished without error and I was redirected to the configuration page. Everything looks fine - I saved the standard settings and then it happend.

Clicked on Save and then I got the error that the link (http://blog.gotchi.at/serendipity_admin.php?
serendipity[adminModule]=plugins&serendipity[plugin_to_conf]=
serendipity_event_spamblock:cb13525ff3ba6d0222bcd41953a5ccce) wasnt found (Not Found The requested URL /serendipity_admin.php was not found on this server.) but only configuring this plugin. All other plugins working well.
But not the Spam Protector plugin.

And the craziest thing is - that its in the installed plugin list but not working.

[garvinhicking]

Hi!

Please ask your webserver provider, it seems he has enabled mod_security which is filtering the page invalidly. You need to ask your provider to please configure mod_Security in a way that is not preventing operation of fully valid pages.

Best regards,
Garvin

[gotchi]

ok - its my own dedicated server and I fixed the problem by switching off modsec for time time I configure it.

config file saved, and it looks like it is working now.
thanks a lot

[dietmar]

Has someone some idea or hint how a "exception" rule for mod_security may look like in this case?

I've got the same problem on a dedicated server.

[apclarke]

I had something of a similar problem. Anytime I tried to configure Spam Protector, I got an Internal Server Error. I am on a shared web host so how I solved the problem was this - create or open the .htaccess file on the serendipity root and add the line

Code: Select all

SecFilterEngine Off

This will turn off mod_security on Apache for just the Serendipity install. Then go back and configure Spam Protector as you like it in the admin section.
When all is done, it is important to return to .htaccess and either delete or comment out the line as follows -

Code: Select all

#SecFilterEngine Off

This will restore the settings for Apache's mod_security which was configured by the web host as an important security measure - eg against sql injection and so on.