SSH lets me run CAT and TOP etc... My new account seems to run on a fairly good box with low usage at the moment.

.

That's SSH, we're talking about the apache Mod_Security module which doesn't allow some webpages to load (or forms to be submitted) if they contain some strings (such as CAT, TOP, SAR, etc)

Okay, but then curious how one would use a PUT statement to a page to run a CAT command?

I'm not a Webmaster and have not tried to hack a Linux box, so curious how that is an issue.

.

'eh you type: "cat wash" and it puts it on the page, anytime something is entered with the string it errors.

If you think to some phpbb issues in the past you can see why this is used, they allowed users to indicate commands which would relay the output to the browser, so you could index.php?style=cat%20/etc/shadowed and it'd display the contents of the file you're looking for... pretty dirty.

Doh! so simple I couldn't see the forest due to all the trees.

Thanks

lol np

Rehashing this 404 Forbidden garbage.

Must be computor illiterate but where do I install this?


.htaccess file under your forums folder (create .htaccess if there isn't
one),

SecFilterEngine Off
SecFilterScanPOST Off

Generally your .htaccess file would be in your web root (the bottom most directory which can be accessed from the web).

Files that start with a . are marked as "hidden" so you'll need to make sure that you have an FTP client that is capable of listing "hidden files".

Generally most hosts include a basic .htaccess file, if one is not presant, just save your input to a file (any name will do) and upload it to your webspace, and rename it to .htaccess.

The reason I say to rename the file on the server is because Windows does not like files that start with a .

Also, use of .htaccess files only work for Apache webservers.

Your host has to also enable .htaccess files for your site from my understanding of it (most seem to allow it).

Likely the permissions for .htaccess will be "basic", I'm not sure if you'd be able to disable these elements in this mode... But theres only one way to find out lol..