Topic on Project:Support desk

Mediawiki 1.21.1
PHP 5.3.25
Mysql 5.5.31

I have experienced a curious problem when submitting a page that contains the string cimetidine. The page is not saved and browser redirected to the Main Page.

I used the sandbox and incrementally created the problem: No issues with: C Ci Cim Cime Cimet Cimeti Cimetid Cimetidi Cimetidin imetidine

but nogo with Cimetidine

ditto behaviour with lower case 'cimetidine', so it's case-insensitive ditto crash with ':Cimetidine' and ':cimetidine' (note leading colon for wiki tab), so you can't escape out of it with wiki codes ditto crash with '_Cimetidine' and '_cimetidine', so you can't escape it with leading characters and finally, ditto with 'cimetidine_' and even '_cimetidine_', or ccimetidineee so you can't escape it by right-padding or even embedding internally.

Conclusion: The exact sequence of characters 'cimetidine' (case insensitive) can't be used, even when embedded inside another string!

I've searched Google and Mediawiki for (cimetidine && mediawiki) but no bug reports seem to have been lodged.

Activated debug log but no useful information was apparent.

Wiki can be found at www.chempathwiki.net

Any suggestions greatly appreciated.

This looks like you have installed any sort of spam filter (either a MediaWiki extension, or a module installed on the web server) that look for some words on the page, and if found, redirects to the main page. If you are on a shared hosting, ask the technical support.

Good news. The problem has been solved by the hosting provider, although they have not indicated explicitly what the problem was. Thank you for putting me in the right direction.

Apparently there was an issue with mod_security rules, which has been addressed by the hosting provider.

So any more info on how it was solved, i have been working on this for days going in circles, it is absolutely maddening. I tried to over ride mod_security via .htaceess but I don't even think its loaded in apache.

So any more info on how it was solved, i have been working on this for days going in circles, it is absolutely maddening. I tried to over ride mod_security via .htaceess but I don't even think its loaded in apache.

So any more info on how it was solved, i have been working on this for days going in circles, it is absolutely maddening. I tried to over ride mod_security via .htaceess but I don't even think its loaded in apache.

You can't override mod_security in .htaccess. You should disable mod_security in the apache config, see if the problem is solved, and then review the rules you have for mod_security and disabling the ones that cause the problem