Mod_Security error for Auto Post to Facebook
By Michael Martin on Friday, 25 December 2015
Posted in Technical Issues
Likes 0
Views 295
Votes 0
This is an odd situation. I have read many times that the error for Mod_Security is from my host. I have a small issue with this. The auto post setup in Easy Discuss went through without any errors. I find this strange considering one would assume that both work the same way and both would require the same permissions. Can some please explain this to me and possibly help me solve this problem. I have already contacted my Hostgator in regards to this and one of their technical support personnel told me that it was due to a php error generated by the EasyBlog.
Hey Michael,

I am really sorry for the delay of this reply as it is actually a public day off for us here. Unlike EasyDiscuss, we have added a new "state" in the query string.

To give you a gist of what I am trying to explain here,



Notice the "state=" . base64_encode($from) . It seems like mod_security is very "particular" about the keyword "state" and unfortunately Facebook only accepts this.

Why this isn't happening on EasyBlog 3.9 and EasyDiscuss, is because we weren't using the "state" portion of the authentication dialog.

I am actually looking at the possibility of not using the "state" at all but it would make our code to be less modular and we have to write separate functions (duplicate codes are bad).
Mark
·
Saturday, 26 December 2015 15:43
·
0 Likes
·
0 Votes
·
0 Comments
·
OK, I get what you are saying but how do we go about fixing the issue? I have other issues as well, I am asking only because I purchased all your other software specifically for my new site which I had hoped would be ready for friends, family and anyone else to use by now and it has been over a month. All I want, is for everything to work as it should and seamlessly.

EasyBlog Professional
Komento Professional
EasySocial Starter
EasyDiscuss Professional
Michael Martin
·
Saturday, 26 December 2015 16:28
·
0 Likes
·
0 Votes
·
0 Comments
·
Hey Michael,

The only way to fix this is to ask your hosting provider to add an exception in their mod_security rule. If you are having other issues, please feel free to start a new thread on the forums and let us know the problems that you are facing
Mark
·
Saturday, 26 December 2015 16:37
·
0 Likes
·
0 Votes
·
0 Comments
·
I am by no means an expert or anything but wouldn't it make more sense that if you have 3 software components using the same function that you create that function as a separate component that all 3 components could access when needed?
Other issues let's see: http://stackideas.com/forums/easydiscuss-categories-not-displaying-at-all
Michael Martin
·
Saturday, 26 December 2015 16:48
·
0 Likes
·
0 Votes
·
0 Comments
·
Michael,

This is under the assumption that you are using all 3 different products. We have users who only use a single product and this wouldn't work.

Again, the reason that there is a new "state" in the URL parameter is because we need this data back when facebook redirects you back to EasyBlog after authorizing. The issue here has nothing to do with EasyBlog / Facebook but your hosting provider has mod_security in place which has a false positive report over the url
Mark
·
Saturday, 26 December 2015 16:52
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for the fast response. No onto my other issues.
Michael Martin
·
Saturday, 26 December 2015 17:00
·
0 Likes
·
0 Votes
·
0 Comments
·
No problem Michael
Mark
·
Saturday, 26 December 2015 17:05
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post