URLs are not working in beta11

[phpfreechat]

csstidy is only used to parse css stylesheets at chat loading ... it's not used at all to parse urls.

[King Moonraiser]

We you able to log into my chat and see the problem?

[zovall]

I'm having the same problem. Anything that begins with 'http' is not being displayed in the chat.

Anyone else having this issue? I'm using the Vanilla Add On.

[zovall]

Also, my site is hosted at Dreamhost. Any ideas?

[King Moonraiser]

Also, my site is hosted at Dreamhost. Any ideas?

Same here! There has to be a connection.

[King Moonraiser]

I think I found the culprit!

Dreamhost has implemented an add-on called mod_security. Other hosts may have done the same.

It's on by default. To disable it go to your dreamhost panel, and do the following: Control Panel -> Domains -> Manage Domains Screen. Select the "edit" link under the "Actions" column on the right side of the screen adjacent to the domain in question, uncheck the setting for Extra Web Security," and submit the form.

However, I've found a workaround. Simply create a .htaccess file containing the following in your chat directory:

Code: Select all

<IfModule mod_security.c>
  SecFilterEngine Off
</IfModule>

That way you can keep mod_security on for the rest of your domain.

[zovall]

Which folder are you placing this .htaccess file into?

I've tried the src folder and the phpfreechat-1.0-beta11 folder to no avail.

[King Moonraiser]

Which folder are you placing this .htaccess file into?

I've tried the src folder and the phpfreechat-1.0-beta11 folder to no avail.

Put it in the phpfreechat-1.0-beta11 folder. Make sure the file is really named ".htaccess" and has 644 access on it. Files on linux that begin with a "." are hidden files.

Of course, you should try disabling the "Extra Security" if the .htaccess file doesn't work.

UPDATE: Using the .htaccess file I posted turns off ALL mod_security for the chat software. On my Dreamhost account, I have found that this works without disabling other potentially helpful features of mod_security:

Code: Select all

<IfModule mod_security.c>
  <Files index.php>
    SecFilterInheritance Off
  </Files>
</IfModule>

We want to keep as much of mod_security running to protect the application without preventing it from working altogether.

[zovall]

Thanks for the advice KM!

I actually had to place:

Code: Select all

<IfModule mod_security.c>
  SecFilterEngine Off
</IfModule>

in the .htaccess of my forum software a few directories up from the phpfreechat folder.

Also, replacing the above code with:

Code: Select all

<IfModule mod_security.c>
  <Files index.php>
    SecFilterInheritance Off
  </Files>
</IfModule>

didn't work for me.

Things are working fine now although I understand that security may not be as tight as could be.