Really wierd - in configuration

[Guest]

When adding categories in admin/catalog, i just cannot make a category with the name 'curl life' ???

 

When this is done i get FORBIDDEN page saying i do not have permissions to access /catalog/admin/categories.php

 

It takes the word curl, or life or one word - 'curlife' but will not accept Curl Life

 

Can anyone tell me why??

 

Thank you

 

Steve

[stevel]

I'd guess you have an .htaccess that is trying to be clever with rewrites. I can add such a category fine to my store.

[Guest]

I'd guess you have an .htaccess that is trying to be clever with rewrites.  I can add such a category fine to my store.

<{POST_SNAPBACK}>

 

So what would we need to change exactly?

 

thank you

 

steve

[stevel]

I don't know. It could be that you have something for your site that is looking for "curl " in URL parameters and removing or rewriting them. Or it could be that the .htaccess is forcing a failure if it sees that.

 

As an example, I have the following in my .htaccess:

RewriteCond %{QUERY_STRING} :/ [NC]
RewriteRule ^ - [F]

This prevents anyone from trying to put a URL in a web form parameter. But the category name is a POST parameter, not a GET parameter, so I don't THINK that would be relevant. I'm not an expert in that area, however.

[♥Vger]

I'm guessing (just guessing) that Curl is a reserved word for the system, given that it relates to a programme installed on most php systems.

 

Vger

[stevel]

Well, that was my thought too, but.. reserved WHERE? It reminds me of the stupid thing Yahoo Mail did where it would replace the string "eval" in people's emails with "review". Do a Google search on "medireview" and see how many people sent e-mails with "medieval". I discovered this when my company's customers complained that their evaluation licenses didn't work - they were sent by e-mail and contained "eval". Yahoo Mail changed the text and broke the license processing.

 

Anyway, I was guessing that there's something in the server processing that is being a bit "too clever" in trying to prevent hacks. .htaccess is one place to look, but if it's not there, then contact the host's admins and ask.