Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

error in first conf...
 
Notifications
Clear all

error in first configuration

6 Posts
2 Users
0 Reactions
3,062 Views
(@beastie)
Posts: 4
Active Member
Topic starter
 
[#5001]

Hello I have downloaded the projeqtorV6.5.6
I have put it in my hosting server running php 7.1.14 MySQL, v10.2.12
I run the configuration for the first time...
edited the data for connection to DB database I had created with new db user and pass and the email data (did nothing to ldap section)

when I press ok i get the error Technical issue occured possibly due to bad network connection.
Please try again.
If issue persists, please contact your administrator.
I am using firefox and I cannot understand where is the problem.


 
Posted : 05 Mar 2018 17H04
babynus
(@babynus)
Posts: 14957
Main Contributor Admin
 

Check for errors in projeqtor log file.
If error is in configuration of log file 🙁 error is logged on apache error log file.


 
Posted : 05 Mar 2018 19H22
(@beastie)
Posts: 4
Active Member
Topic starter
 

these are the error line in logs files
from plesk platform

POST /tool/configCheck.php?destinationWidth=882&destinationHeight=70&isIE= HTTP/1.0

ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\b(?:m(?:s(?:ysaccessobjects|ysaces|ysobjects|ysqueries|ysrelationships|ysaccessstorage|ysaccessxml|ysmodules|ysmodules2|db)|aster\\.\\.sysdatabases|ysql\\.db)\\b|s(?:ys(?:\\.database_name|aux)\\b|chema(?:\\W*\\(|_name\\b)|qlite(_temp)?_master\\b) ..." at ARGS:value[SslKey]. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/24_SQL_SQLi.conf"] [line "74"] [id "218530"] [rev "3"] [msg "COMODO WAF: SQL Injection Attack: Common DB Names Detected||project.giagiasdev.eu|F|2"] [data "Matched Data: database ( found within ARGS:value[SslKey]: Location for SSL Key file for SSL connexion to MySql database (keep empty unless you know what it is)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "project.giagiasdev.eu"] [uri "/tool/configCheck.php"] [unique_id "Wp1eZCHjPV9BC8KWOlKndwAAAJQ"]


 
Posted : 06 Mar 2018 0H55
babynus
(@babynus)
Posts: 14957
Main Contributor Admin
 

The error is raised by ModSecurity
I cannot understand why, but it seems it detected db name and so raised error...


 
Posted : 06 Mar 2018 1H36
(@beastie)
Posts: 4
Active Member
Topic starter
 

My data for mysql db that I created
db server db60.grserver.gr:3306
dbname dimipsar045784_project
dbuser projectusr
dbpass thepassIgave

so in config I wrote

Database type : 'mysql'
Database host : db60.grserver.gr
Database port : 3306
Database user to connect : projectusr
Database password for user : thepassIgave
Database schema name : dimipsar045784_project
Name to be displayed : ProjeQtOr

next 5 fields left blank


 
Posted : 06 Mar 2018 1H43
babynus
(@babynus)
Posts: 14957
Main Contributor Admin
 

Yes,
Configuration requires to pass the db name
But the module ModSecurity seems to forbids parameters with value including db name.

msg "COMODO WAF: SQL Injection Attack: Common DB Names

So the configuration won't work with this module on.
You must disable it to finish the setup (then you can set it on back)


 
Posted : 06 Mar 2018 2H46
Share:

Scroll to Top