Modsecurity

Project: 
Ubercart
Category: 
bug report
Priority: 
normal
Status: 
active

Seems that our host had installed modsecurity in our VPS. Modsecurity blocked the install using the automated installer @ http://install.ubercart.org. It also prevented the javascripts on many order pages from functioning properly, specifically:
- The " Search for an existing customer" and "Create a new customer" on the Create Order page in admin
- Most javascripts on the "Edit" page of the Create Order section in the admin.
- Shipping & payment details in the front-end

The solution for us is simply disabling modsecurity... But these components should be designed to be run with modsecurity enabled.

Re: Modsecurity

You'd have to ask Ryan or Lyle about the javascript in the UI. As far as having troubles using the UberInstaller, we also have an ubercart package that contains an Ubercart installation profile. It contains all drupal, ubercart, and all the required modules for ubercart. All you need to do is download it, unpack it on to your web server, then run install.php. That should get around the problem of not being able to use the UberInstaller.

Re: Modsecurity

What feature of the JavaScript causes mod_security to prevent it? I would have thought they were plain HTTP requests, which is what Apache does.