mod sec issue but can't figure out what

I've just discovered an issue when trying to run Re-CaptureV2. I get an error reporting that the validation code is incorrect. I'm pretty much convinced that it's either Owasp or a PHP module, but I'm stumped, as my current PHP and ModSec config appears to be the same as one of my other servers. Any ideas ??


[Thu Jan 16 10:31:19.423076 2020] [cgi:error] [pid 21100] [client xx.xx.xx.xx:51486] AH01215: PHP Warning:  file_put_contents(e331d.sql.ada5551fd984837d35a554bce7ca270f.cache) [function.file-put-contents.php]: failed to open stream: Permission denied in /home/mysite/public_html/classes/cache/file.class.php on line 230: /usr/local/cpanel/cgi-sys/ea-php71, referer: https://www.mysite.co.uk/register.html

[Thu Jan 16 10:31:19.423141 2020] [cgi:error] [pid 21100] [client xx.xx.xx.xx:51486] AH01215: PHP Warning:  Cache data not written. in /home/mysite/public_html/classes/cache/file.class.php on line 233: /usr/local/cpanel/cgi-sys/ea-php71, referer: https://www.mysite.co.uk/register.html

edit: Its not OWASP, I switched it off an got the same issue.

keat63

January 16, 2020 11:49

Turned out to be 'allow_url_fopen' was disabled in php.ini

cPanelLauren

January 16, 2020 23:49

Glad you caught that @keat63 - file_put_contents is a giveaway for this it's discussed here: PHP: file_put_contents - Manual

January 17, 2020 11:26

Two hours of head scratching though :)

January 17, 2020 18:55

I've been there as well! I think we all have :)

mod sec issue but can't figure out what

Comments

Didn't find what you were looking for?