one of my customers got the a problem with script , i think , this is a php function problem , that should edit on php.ini , but really i don't have experience about resolve it
also i rebuild apache , but try same error
this is a modsecurity problem , but how should be solve?!
look at the below message from my customer:
Hello. Is my error 406 problem being investigated or gained any progress now? Here are some more details that i found out during some tests. Problem is that, that server gives HTTP 406 error if finds symbol - % in any of GET parameters. Can test it here kaste.org/test.php?test=any_text_we_want - this goes without error, butkaste.org/test.php?test=any_text%we_want - this produces 406 error. As desktop applications that i need to use, sends encrypted data to server which contains %, then there is no way, I can handle with this issue. So, please do Your best to solve this issue.
Is it really so hard to look at Your mod security log files, find rule witch gives FALSE positive (in symbol % at GET request), and implement exception for my script?
It should be something like this:
<LocationMatch “paht to my script”> (announce.php)
SecRuleRemoveById 960010 (number of rule who gives FALSE positive...)
do you know about it anythings , click on below link
kaste.org/test.php?test=any_text%we_want << get the Not Acceptable message
There are many steps involved with the resolution of this problem.
Step 1 ==> Check the mod_security error_log and find out the exact rule that is causing the error.
Step 2 ==> Analyse the logic used in the rule and make a judgment whether the rule is needed or not. If it's not needed, comment the rule from your modscurity configuration. If it's needed, let the customer know, why you cannot disable the rule.
PS: If he is an important customer and you can't afford to lose this client, you may also think of the option to disable modsecurity for this website. Under normal circumstances, this is not the recommended solution though.
"If you have knowledge, let others light their candles in it. "
I would say you hire a server admin to manage your server. It looks like you posted the whole support ticket you received here. If you do not know how to manage a server and offering web hosting, that will be a big problem. A server admin can help you troubleshoot problems with your servers. It's hard to give you help if we do not have access to your server to see what you have installed, etc.
All things work together for the good of those who love God - Romans 8:28