Header injection error
Hello I tried to install the cookie consent script through injections but when I click to save the header.
There happens nothing.
The screenshot with console message is in the attachment.
-
- · Baloo
- ·
Hi Cem, if you want, post the complete code here, I can test it and see if it produces an error at home.
-
- · Cem
- ·
Hi Baloo I am attaching the code.
Thanks a lot:) -
- · Baloo
-
·
In reply to Cem
- ·
the error does not come from the injected code, try to delete it, I think it will always be there.
I do not have an error too, with or without injection, it is linked to the cache, if I disable all the cache, it disappears.
Is it the same with you? -
- · Cem
-
·
In reply to Baloo
- ·
As I see whatever code I put there same error is happening.
Without code in the box with the emty box it works as expected. -
- · Cem
- ·
I deselect all caches nothing changed
cleared the cache from FTP (I dont know if this is the correct thing to "clear the cache") no thing changed
Also tried with Chromium on desktop result is same. -
-
·
LeonidS
- ·
Hello Cem!
From my side, it doesn't generate the similar errors too. Usually, "failed to load resource" is called by the unavailable CSS or images files.
-
·
LeonidS
-
- · Cem
-
·
In reply to LeonidS
- ·
Leonid even this simple code <meta charset="UTF-8"> is not being transferred.
-
-
·
LeonidS
-
·
In reply to Cem
- ·
From my side, your JavaScript code could be inserted without any losses. I saw your Cookie dialog with the Turkish text. So remind me via Messenger the actual accesses to check.
-
·
LeonidS
-
- · Cem
-
·
In reply to LeonidS
- ·
ok thanks now I am sending
-
-
·
Alex T⚜️
- ·
Please try to add the following into studio/.htaccess file:
<IfModule mod_security2.c> SecRuleEngine Off </IfModule>
-
·
Alex T⚜️
-
- · Cem
-
·
In reply to Alex T⚜️
- ·
Ok i will do tomorrow morning. Now it's late here.
Thanks a lot :)
-
- · Cem
- ·
Hi Alex when I put this it gives out an internal server error.
-
- · UNA Operator
- ·
Could you please provide contents of your .htaccess file, it maybe there is some error there, also "internal server error" means that you need to check web-server logs for particular error.
-
- · Cem
- ·
Please see the attachments for the htaccess files
-
-
·
Alex T⚜️
-
·
In reply to Cem
- ·
Everything looks normal, but I don't see the modification in any of these files I pointed out before:
https://una.io/cmts.php?sys=bx_forum&id=1440&cmt_id=5458
Could you please send studio/.htaccess file with applied modification ?
-
·
Alex T⚜️
-
- · Cem
-
·
In reply to Alex T⚜️
- ·
Hi Alex it was giving internal server error when I put the modification you recommended.
By the was I changed the server yesterday and moved the site to the new one .
Now I tried the injection in the new server it is working without any problem.
But if you want to clarify the problem I can install another UNA instance to the old server and make trials there.
-
-
·
Alex T⚜️
-
·
In reply to Cem
- ·
It's great that everything works now. No need to recreate the issue tnen, it maybe your old host just forbids changing some things via .htaccess file which caused internal server error.
-
·
Alex T⚜️
-
I have the same problem. I can't inject code into the header.
I have disabled all cache and added the 3 lined to the studio/.htaccess file you suggested earlier. When I add the lines to the htaccess file I get page not found errors.
Is that because my una site is in a subdirectory and not the root directory where the old dolphin is residing?
All the best
Finn
-
-
·
LeonidS
- ·
Hello Finn!
Please provide me your admin access of your UNA site and an example of your injection, which doesn't work. BTW - revert all changes in .haccess file, let's start from the beginning :-)
-
·
LeonidS
-
Thank you Leonid. I sent you a message
-
I get an internal error 500 when I try this
-
If you made changes according to https://una.io/cmts.php?sys=bx_forum&id=1440&cmt_id=5458 post and got 500 error then it means your server's rules don't allow to do it via .htaccess.
-
- · rood
-
·
In reply to LeonidS
- ·
I can't save an injection into header in designer - same issue (save button does nothing). Tried changing .htaccess as AlexT suggests, but then get 500 error. What is the fix you refer to with regards to "server's rules don't allow to do it via .htaccess"
-
-
·
LeonidS
-
·
In reply to rood
R
- ·
Hello rood !
It means that it's impossible to change the server settings via the editing of .htaccess file. You need to ask your hosting support.
-
·
LeonidS
-
- · rood
-
·
In reply to LeonidS
- ·
Ok cool - what do I need to ask them?
-
-
·
LeonidS
-
·
In reply to rood
R
- ·
Ask them next question: "How is it possible to disable the modsecurity in the studio subfolder?".
-
·
LeonidS