Selecting image in article gives internal server error Topic is solved

[aqualuso]

Hi, When I select a preview or full image in any article I get an 'internal server error'.
I can add the path and that works fine but using the select button does not work either with Tiny MCE or with JCE.

Joomla! Instance :: Joomla! 4.4.4-Stable (Pamoja) 16-April-2024
Joomla! Configured :: Yes | Writable (644) |
Configuration Options :: Offline: false | SEF: true | SEF Suffix: true | SEF ReWrite: true | .htaccess/web.config: Yes | GZip: false | Cache: false | CacheTime: 15 | CacheHandler: file | CachePlatformPrefix: false | FTP Layer: N/A | Proxy: false | LiveSite: | Session lifetime: 15 | Session handler: database | Shared sessions: false | SSL: 2 | Error Reporting: maximum | Site Debug: true | Language Debug: false | Default Access: Public | Unicode Slugs: false | dbConnection Type: mysqli | PHP Supports J! 4.4.4: Yes | Database Supports J! 4.4.4: Yes | Database Credentials Present: Yes |

Host Configuration :: OS: Linux | OS Version: 3.10.0-962.3.2.lve1.5.77.el7.x86_64 | Technology: x86_64 | Web Server: Apache | Encoding: gzip, deflate, br | System TMP Writable: Yes | Free Disk Space : 812.03 GiB |

PHP Configuration :: Version: 8.1.28 | PHP API: litespeed | Session Path Writable: Yes | Display Errors: 0 | Error Reporting: 22527 | Log Errors To: error_log | Last Known Error: 13th May 2024 00:46:53. | Register Globals: | Magic Quotes: | Safe Mode: | Allow url fopen: 1 | Open Base: | Uploads: 1 | Max. Upload Size: 64M | Max. POST Size: 64M | Max. Input Time: 60 | Max. Execution Time: 30 | Memory Limit: 128M

Database Configuration :: Version: 5.7.44-cll-lve (Client:5.7.44) | Database Size: 11.41 MiB | #of Tables with config prefix:  102 | #of other Tables:  0 | User Privileges : GRANT ALL

PHP Extensions :: Core (8.1.28) | date (8.1.28) | libxml (8.1.28) | openssl (8.1.28) | pcre (8.1.28) | sqlite3 (8.1.28) | zlib (8.1.28) | bz2 (8.1.28) | calendar (8.1.28) | ctype (8.1.28) | curl (8.1.28) | hash (8.1.28) | filter (8.1.28) | ftp (8.1.28) | gettext (8.1.28) | json (8.1.28) | iconv (8.1.28) | SPL (8.1.28) | pcntl (8.1.28) | readline (8.1.28) | Reflection (8.1.28) | session (8.1.28) | standard (8.1.28) | mbstring (8.1.28) | shmop (8.1.28) | SimpleXML (8.1.28) | tokenizer (8.1.28) | xml (8.1.28) | litespeed () | i360 (8.1.1) | bcmath (8.1.28) | dom (20031129) | fileinfo (8.1.28) | gd (8.1.28) | imap (8.1.28) | intl (8.1.28) | exif (8.1.28) | mysqli (8.1.28) | mysqlnd (mysqlnd 8.1.28) | PDO (8.1.28) | pdo_mysql (8.1.28) | pdo_sqlite (8.1.28) | Phar (8.1.28) | posix (8.1.28) | soap (8.1.28) | sockets (8.1.28) | tidy (8.1.28) | xmlreader (8.1.28) | xmlwriter (8.1.28) | xsl (8.1.28) | zip (1.19.5) | Zend Engine (4.1.28) |
Potential Missing Extensions ::

Switch User Environment :: PHP CGI: Yes | Server SU: Yes | PHP SU: Yes | Potential Ownership Issues: No

Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (---) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) | administrator/logs/ (755) | api/ (755) |

Elevated Permissions (First 10) ::

Database statistics :: Uptime: 1517146 | Threads: 12 | Questions: 561317347 | Slow queries: 0 | Opens: 63190861 | Flush tables: 470 | Open tables: 2000 | Queries per second avg: 369.982 |

Components :: Site ::
Core ::
3rd Party:: WF_AGGREGATOR_AUDIO_TITLE (2.9.71) ? | WF_AGGREGATOR_DAILYMOTION_TITLE (2.9.71) ? | WF_AGGREGATOR_VIDEO_TITLE (2.9.71) ? | WF_AGGREGATOR_VIMEO_TITLE (2.9.71) ? | WF_AGGREGATOR_[youtube]_TITLE (2.9.71) ? | WF_FILESYSTEM_JOOMLA_TITLE (2.9.71) ? | WF_LINKS_JOOMLALINKS_TITLE (2.9.71) ? | WF_POPUPS_JCEMEDIABOX_TITLE (2.9.71) ? | WF_LINK_SEARCH_TITLE (2.9.71) ? | WF_ANCHOR_TITLE (2.9.38) ? | WF_ARTICLE_TITLE (2.9.38) ? | WF_ATTRIBUTES_TITLE (2.9.38) ? | WF_AUTOSAVE_TITLE (2.9.38) ? | WF_BROWSER_TITLE (2.9.38) ? | WF_CHARMAP_TITLE (2.9.38) ? | WF_CLEANUP_TITLE (2.9.38) ? | WF_CLIPBOARD_TITLE (2.9.38) ? | WF_CONTEXTMENU_TITLE (2.9.38) ? | WF_DIRECTIONALITY_TITLE (2.9.38) ? | WF_EMOTIONS_TITLE (2.9.38) ? | WF_FONTCOLOR_TITLE (2.9.38) ? | WF_FONTSELECT_TITLE (2.9.38) ? | WF_FONTSIZESELECT_TITLE (2.9.38) ? | WF_FORMATSELECT_TITLE (2.9.38) ? | WF_FULLSCREEN_TITLE (2.9.38) ? | WF_HELP_TITLE (2.9.38) ? | WF_HR_TITLE (2.9.38) ? | WF_IMGMANAGER_TITLE (2.9.38) ? | WF_KITCHENSINK_TITLE (2.9.38) ? | WF_LANGCODE_TITLE (2.9.38) ? | WF_LINK_TITLE (2.9.38) ? | WF_LISTS_TITLE (2.9.38) ? | WF_MEDIA_TITLE (2.9.38) ? | WF_NONBREAKING_TITLE (2.9.38) ? | JCE - Noneditable (1.0.0) ? | WF_PREVIEW_TITLE (2.9.38) ? | WF_PRINT_TITLE (2.9.38) ? | WF_REFERENCE_TITLE (2.9.38) ? | WF_SEARCHREPLACE_TITLE (2.9.38) ? | WF_SOURCE_TITLE (2.9.38) ? | WF_SPELLCHECKER_TITLE (2.9.38) ? | WF_STYLE_TITLE (2.9.38) ? | WF_STYLESELECT_TITLE (2.9.38) ? | WF_TABLE_TITLE (2.9.38) ? | WF_TEXTCASE_TITLE (2.9.38) ? | WF_VISUALBLOCKS_TITLE (2.9.38) ? | WF_VISUALCHARS_TITLE (2.9.38) ? | WF_WORDCOUNT_TITLE (2.9.38) ? | WF_ANCHOR_TITLE (2.9.71) ? | WF_ARTICLE_TITLE (2.9.71) ? | WF_ATTRIBUTES_TITLE (2.9.71) ? | WF_AUTOSAVE_TITLE (2.9.71) ? | WF_BROWSER_TITLE (2.9.71) ? | WF_CHARMAP_TITLE (2.9.71) ? | WF_CLEANUP_TITLE (2.9.71) ? | WF_CLIPBOARD_TITLE (2.9.71) ? | WF_CONTEXTMENU_TITLE (2.9.71) ? | WF_DIRECTIONALITY_TITLE (2.9.71) ? | WF_EMOTIONS_TITLE (2.9.71) ? | WF_FONTCOLOR_TITLE (2.9.71) ? | WF_FONTSELECT_TITLE (2.9.71) ? | WF_FONTSIZESELECT_TITLE (2.9.71) ? | WF_FORMATSELECT_TITLE (2.9.71) ? | WF_FULLSCREEN_TITLE (2.9.71) ? | WF_HELP_TITLE (2.9.71) ? | WF_HR_TITLE (2.9.71) ? | WF_IMGMANAGER_TITLE (2.9.71) ? | WF_KITCHENSINK_TITLE (2.9.71) ? | WF_LANGCODE_TITLE (2.9.71) ? | WF_LINK_TITLE (2.9.71) ? | WF_LISTS_TITLE (2.9.71) ? | WF_MEDIA_TITLE (2.9.71) ? | WF_NONBREAKING_TITLE (2.9.71) ? | JCE - Noneditable (1.0.0) ? | WF_PREVIEW_TITLE (2.9.71) ? | WF_PRINT_TITLE (2.9.71) ? | WF_REFERENCE_TITLE (2.9.71) ? | WF_SEARCHREPLACE_TITLE (2.9.71) ? | WF_SPELLCHECKER_TITLE (2.9.71) ? | WF_STYLE_TITLE (2.9.71) ? | WF_STYLESELECT_TITLE (2.9.71) ? | WF_TABLE_TITLE (2.9.71) ? | WF_TEXTCASE_TITLE (2.9.71) ? | WF_VISUALBLOCKS_TITLE (2.9.71) ? | WF_VISUALCHARS_TITLE (2.9.71) ? | WF_WORDCOUNT_TITLE (2.9.71) ? | WF_SOURCE_TITLE (2.9.71) ? |

Components :: Admin ::
Core :: com_joomlaupdate (4.0.3) 1 | com_contenthistory (4.0.0) 1 | com_fields (4.0.0) 1 | com_media (3.0.0) 1 | com_content (4.0.0) 1 | com_associations (4.0.0) 1 | com_languages (4.0.0) 1 | com_actionlogs (3.9.0) 1 | com_guidedtours (4.3.0) 1 | com_messages (4.0.0) 1 | com_checkin (4.0.0) 1 | com_users (4.0.0) 1 | com_categories (4.0.0) 1 | com_installer (4.0.0) 1 | com_cache (4.0.0) 1 | com_mails (4.0.0) 1 | com_admin (4.0.0) 1 | com_privacy (3.9.0) 1 | com_scheduler (4.1.0) 1 | com_modules (4.0.0) 1 | com_plugins (4.0.0) 1 | com_workflow (4.0.0) 1 | com_menus (4.0.0) 1 | com_ajax (4.0.0) 1 | com_finder (4.0.0) 1 | com_cpanel (4.0.0) 1 | com_newsfeeds (4.0.0) 1 | com_wrapper (4.0.0) 1 | com_login (4.0.0) 1 | com_postinstall (4.0.0) 1 | com_config (4.0.0) 1 | com_banners (4.0.0) 1 | com_templates (4.0.0) 1 | com_tags (4.0.0) 1 | com_redirect (4.0.0) 1 |
3rd Party:: COM_JCE (2.9.71) 1 | com_admintools (7.5.3) 1 | com_akeebabackup (9.9.3) 1 | COM_CONVERTFORMS (4.4.1) 1 |

Modules :: Site ::
Core :: mod_random_image (3.0.0) 1 | mod_custom (3.0.0) 1 | mod_breadcrumbs (3.0.0) 1 | mod_articles_latest (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_tags_similar (3.1.0) 1 | mod_languages (3.5.0) 1 | mod_footer (3.0.0) 1 | mod_finder (3.0.0) 1 | mod_articles_category (3.0.0) 1 | mod_articles_popular (3.0.0) 1 | mod_syndicate (3.0.0) 1 | mod_wrapper (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_whosonline (3.0.0) 1 | mod_articles_news (3.0.0) 1 | mod_stats (3.0.0) 1 | mod_banners (3.0.0) 1 | mod_users_latest (3.0.0) 1 | mod_tags_popular (3.1.0) 1 | mod_login (3.0.0) 1 | mod_related_items (3.0.0) 1 | mod_articles_archive (3.0.0) 1 | mod_articles_categories (3.0.0) 1 |
3rd Party:: MOD_YOOTHEME_BUILDER (4.3.13) 1 | mod_convertforms (1.0) 1 |

Modules :: Admin ::
Core :: mod_post_installation_messages (4.0.0) 1 | mod_custom (3.0.0) 1 | mod_privacy_status (4.0.0) 1 | mod_feed (3.0.0) 1 | mod_sampledata (3.8.0) 1 | mod_logged (3.0.0) 1 | mod_user (4.0.0) 1 | mod_loginsupport (4.0.0) 1 | mod_messages (4.0.0) 1 | mod_guidedtours (4.3.0) 1 | mod_stats_admin (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_toolbar (3.0.0) 1 | mod_title (3.0.0) 1 | mod_privacy_dashboard (3.9.0) 1 | mod_frontend (4.0.0) 1 | mod_latestactions (3.9.0) 1 | mod_latest (3.0.0) 1 | mod_multilangstatus (3.0.0) 1 | mod_version (3.0.0) 1 | mod_login (3.0.0) 1 | mod_quickicon (3.0.0) 1 | mod_popular (3.0.0) 1 | mod_submenu (3.0.0) 1 |
3rd Party:: MOD_YOOTHEME_LINK (4.3.13) 1 |

Libraries ::
Core ::
3rd Party::

Plugins ::
Core :: plg_authentication_joomla (3.0.0) 1 | plg_authentication_cookie (3.0.0) 1 | plg_authentication_ldap (3.0.0) 0 | plg_quickicon_phpversioncheck (3.7.0) 1 | plg_quickicon_overridecheck (4.0.0) 1 | plg_quickicon_privacycheck (3.9.0) 1 | plg_quickicon_eos (4.4.0) 1 | plg_quickicon_joomlaupdate (3.0.0) 1 | plg_quickicon_extensionupdate (3.0.0) 1 | plg_quickicon_downloadkey (4.0.0) 1 | plg_captcha_recaptcha (3.4.0) 0 | plg_captcha_recaptcha_invisible (3.8) 0 | plg_privacy_consents (3.9.0) 1 | plg_privacy_message (3.9.0) 1 | plg_privacy_user (3.9.0) 1 | plg_privacy_content (3.9.0) 1 | plg_privacy_actionlogs (3.9.0) 1 | plg_user_token (3.9.0) 1 | plg_user_profile (3.0.0) 0 | plg_user_contactcreator (3.0.0) 0 | plg_user_joomla (3.0.0) 1 | plg_user_terms (3.9.0) 0 | plg_workflow_notification (4.0.0) 1 | plg_workflow_publishing (4.0.0) 1 | plg_workflow_featuring (4.0.0) 1 | plg_content_loadmodule (3.0.0) 1 | plg_content_finder (3.0.0) 1 | plg_content_pagenavigation (3.0.0) 1 | plg_content_fields (3.7.0) 1 | plg_content_joomla (3.0.0) 1 | plg_content_vote (3.0.0) 0 | plg_content_confirmconsent (3.9.0) 0 | plg_content_pagebreak (3.0.0) 1 | plg_content_emailcloak (3.0.0) 1 | plg_sampledata_multilang (4.0.0) 1 | plg_finder_newsfeeds (3.0.0) 1 | plg_finder_tags (3.0.0) 1 | plg_finder_content (3.0.0) 1 | plg_finder_categories (3.0.0) 1 | plg_finder_contacts (3.0.0) 1 | plg_actionlog_joomla (3.9.0) 1 | plg_filesystem_local (4.0.0) 1 | plg_editors-xtd_article (3.0.0) 1 | plg_editors-xtd_image (3.0.0) 1 | plg_editors-xtd_module (3.5.0) 1 | plg_editors-xtd_menu (3.7.0) 1 | plg_editors-xtd_fields (3.7.0) 1 | plg_editors-xtd_pagebreak (3.0.0) 1 | plg_editors-xtd_readmore (3.0.0) 1 | plg_media-action_resize (4.0.0) 1 | plg_media-action_crop (4.0.0) 1 | plg_media-action_rotate (4.0.0) 1 | plg_fields_textarea (3.7.0) 1 | plg_fields_usergrouplist (3.7.0) 1 | plg_fields_checkboxes (3.7.0) 1 | plg_fields_list (3.7.0) 1 | plg_fields_text (3.7.0) 1 | plg_fields_user (3.7.0) 1 | plg_fields_sql (3.7.0) 1 | plg_fields_imagelist (3.7.0) 1 | plg_fields_color (3.7.0) 1 | plg_fields_integer (3.7.0) 1 | plg_fields_media (3.7.0) 1 | plg_fields_editor (3.7.0) 1 | plg_fields_calendar (3.7.0) 1 | plg_fields_subform (4.0.0) 1 | plg_fields_radio (3.7.0) 1 | plg_fields_url (3.7.0) 1 | plg_behaviour_versionable (4.0.0) 1 | plg_behaviour_compat (4.4.0) 1 | plg_behaviour_taggable (4.0.0) 1 | plg_installer_webinstaller (4.0.0) 1 | plg_installer_folderinstaller (3.6.0) 1 | plg_installer_override (4.0.0) 1 | plg_installer_urlinstaller (3.6.0) 1 | plg_installer_packageinstaller (3.6.0) 1 | plg_webservices_modules (4.0.0) 1 | plg_webservices_plugins (4.0.0) 1 | plg_webservices_menus (4.0.0) 1 | plg_webservices_newsfeeds (4.0.0) 1 | plg_webservices_config (4.0.0) 1 | plg_webservices_privacy (4.0.0) 1 | plg_webservices_languages (4.0.0) 1 | plg_webservices_redirect (4.0.0) 1 | plg_webservices_tags (4.0.0) 1 | plg_webservices_content (4.0.0) 1 | plg_webservices_templates (4.0.0) 1 | plg_webservices_banners (4.0.0) 1 | plg_webservices_installer (4.0.0) 1 | plg_webservices_media (4.1.0) 1 | plg_webservices_messages (4.0.0) 1 | plg_webservices_users (4.0.0) 1 | plg_task_check_files (4.1) 1 | plg_task_site_status (4.1) 1 | plg_task_requests (4.1) 1 | plg_task_demo_tasks (4.1) 1 | plg_extension_namespacemap (4.0.0) 1 | plg_extension_finder (4.0.0) 1 | plg_extension_joomla (3.0.0) 1 | plg_system_schedulerunner (4.1) 1 | plg_system_remember (3.0.0) 1 | plg_system_debug (3.0.0) 1 | plg_system_logout (3.0.0) 1 | plg_system_sef (3.0.0) 1 | plg_system_logrotation (3.9.0) 1 | plg_system_accessibility (4.0.0) 0 | plg_system_highlight (3.0.0) 1 | plg_system_redirect (3.0.0) 0 | plg_system_webauthn (4.0.0) 1 | plg_system_languagecode (3.0.0) 0 | plg_system_httpheaders (4.0.0) 1 | plg_system_actionlogs (3.9.0) 1 | plg_system_shortcut (4.2.0) 1 | plg_system_jooa11y (4.2.0) 1 | plg_system_skipto (4.0.0) 1 | plg_system_privacyconsent (3.9.0) 0 | plg_system_stats (3.5.0) 1 | plg_system_languagefilter (3.0.0) 1 | plg_system_guidedtours (4.3.0) 1 | plg_system_task_notification (4.1) 1 | plg_system_fields (3.7.0) 1 | plg_system_sessiongc (3.8.6) 1 | plg_system_cache (3.0.0) 0 | plg_system_log (3.0.0) 1 | plg_system_updatenotification (3.5.0) 1 | plg_multifactorauth_totp (3.2.0) 1 | plg_multifactorauth_fixed (4.2.0) 0 | plg_multifactorauth_webauthn (4.2.0) 1 | plg_multifactorauth_email (4.2.0) 1 | plg_multifactorauth_yubikey (3.2.0) 1 | plg_api-authentication_token (4.0.0) 1 | plg_api-authentication_basic (4.0.0) 0 |
3rd Party:: plg_quickicon_jce (2.9.71) 1 | PLG_QUICKICON_AKEEBABACKUP (9.9.3) 1 | plg_editors_tinymce (5.10.9) 1 | plg_editors_codemirror (5.65.15) 1 | plg_editors_jce (2.9.71) 1 | plg_content_jce (2.9.71) 1 | PLG_ACTIONLOG_ADMINTOOLS (7.5.3) 0 | PLG_EDITORS-XTD_CONVERTFORMS (1.0) 1 | Fields - YOOtheme Location (4.3.13) 1 | plg_fields_mediajce (2.9.71) 1 | plg_installer_jce (2.9.71) 1 | PLG_INSTALLER_ZOOLANDERS (1.0.2) 1 | PLG_TASK_ADMINTOOLS (7.5.3) 1 | plg_extension_jce (2.9.71) 1 | System - YOOtheme Framework (4.3.13) 1 | plg_system_jce (2.9.71) 1 | System - Essentials YOOtheme Pro (2.2.11) 1 | PLG_SYSTEM_ADMINTOOLS (7.5.3) 1 | plg_system_nrframework (5.0.25) 1 | PLG_SYSTEM_CFUPLOADEDFILESCLEANER (1.0) 0 | PLG_SYSTEM_CONVERTFORMS (1.0) 1 | plg_system_tgeoip (2.2.5) 1 | PLG_SYSTEM_HERZOGDUPONT (1.8.0) 1 | PLG_CONSOLE_ADMINTOOLS (7.5.3) 1 | PLG_CONVERTFORMS_ACTIVECAMPAIGN (1.0) 1 | PLG_CONVERTFORMS_ACYMAILING (1.0) 1 | PLG_CONVERTFORMS_AWEBER (1.0) 1 | PLG_CONVERTFORMS_CAMPAIGNMONITOR (1.0) 1 | PLG_CONVERTFORMS_CONVERTKIT (1.0) 1 | PLG_CONVERTFORMS_DRIP (1.0) 1 | PLG_CONVERTFORMS_ELASTICEMAIL (1.0) 1 | PLG_CONVERTFORMS_EMAILS (1.0) 1 | PLG_CONVERTFORMS_ERRORLOGGER (1.0) 1 | PLG_CONVERTFORMS_GETRESPONSE (1.0) 1 | PLG_CONVERTFORMS_HUBSPOT (1.0) 1 | PLG_CONVERTFORMS_ICONTACT (1.0) 1 | PLG_CONVERTFORMS_MAILCHIMP (1.0) 1 | PLG_CONVERTFORMS_SALESFORCE (1.0) 1 | PLG_CONVERTFORMS_SENDINBLUE (1.0) 1 | PLG_CONVERTFORMS_ZOHO (1.0) 1 | PLG_CONVERTFORMS_ZOHOCRM (1.0) 1 | PLG_CONVERTFORMSAPPS_ACYMAILING (1.0) 1 | PLG_CONVERTFORMSAPPS_BREVO (1.0) 1 | PLG_CONVERTFORMSAPPS_CONTENT (1.0) 1 | PLG_CONVERTFORMSAPPS_EMAIL (1.0) 1 | PLG_CONVERTFORMSAPPS_GETRESPONSE (1.0) 1 | PLG_CONVERTFORMSAPPS_HUBSPOT (1.0) 1 | PLG_CONVERTFORMSAPPS_MAILCHIMP (1.0) 1 | PLG_CONVERTFORMSAPPS_PHP (1.0) 1 | PLG_CONVERTFORMSAPPS_USERACCOUNT (1.0) 1 | PLG_CONVERTFORMSAPPS_WEBHOOKS (1.0) 1 | PLG_CONVERTFORMSTOOLS_CALCULATIONS (1.0) 1 | PLG_CONVERTFORMSTOOLS_CONDITIONALLO (1.0) ? | PLG_CONVERTFORMSTOOLS_EXPORTSUBMISS (1.0) ? | PLG_CONVERTFORMSTOOLS_GATRACKER (1.0) 0 | PLG_CONVERTFORMSTOOLS_PDF (1.0) 1 | PLG_CONVERTFORMSTOOLS_TASKS (1.0) 1 |

Templates :: Site :: cassiopeia (1.0) 1 | YOOtheme (4.3.13) 1 |
Templates :: Admin :: atum (1.0) 1 |

[Mojsplet]

Same here. No changes was made on Joomla.

[ceford]

Open your browser Developer Tools and see if there are any errors reported when you use the Select button.

[Mojsplet]

I think that this is related viewtopic.php?f=834&t=1009224

[aqualuso]

Yes, it does appear to be a mod_security rule error.
I followed Brians advice: Temporary solution: Go to your cPanel hosting find the "ModSecurity" option, and turn off
That worked so I have now contacted the host to find out if the mod_security rule is faulty and if they fix it.

[Mojsplet]

Would be nice to solve this for others to. Not just deactivating modsecurity.
Please post exact solution. I will do it when my hosting answer with solution.
Thank you

[modernmagic]

I too had to disable ModSecurity on fastcomet hosting.

But I get this warning from FC: Warning: ModSecurity is disabled for one or more of your domains. Only disable ModSecurity while you troubleshoot a problem with your configuration. Without ModSecurity enabled, your domains lose the extra layer of protection that the module provides.

This site was developed on Siteground in which I did not have this issue.

Is there a permanent solution?

[gws]

I too had to disable ModSecurity on fastcomet hosting.

But I get this warning from FC: Warning: ModSecurity is disabled for one or more of your domains. Only disable ModSecurity while you troubleshoot a problem with your configuration. Without ModSecurity enabled, your domains lose the extra layer of protection that the module provides.

This site was developed on Siteground in which I did not have this issue.

Is there a permanent solution?

Your host should have logs which should identify the rogue rule in mod security.

[aqualuso]

My hosting reported back to me saying that they had identified the rule causing the false positive in mod security, and it has been deactivated.
I have now enabled the "ModSecurity" option in my CPanel and all is working correctly.

[Mojsplet]

I dont know if rule ids are the same thru servers, but it seams that rule 77140883 couse the problem.

[modernmagic]

These were the rules in the error logs at fastcomet:

2024-05-21 13:52:59.503698 [NOTICE] [3016206] [T7] [47.128.125.29:51780:HTTP2-1#APVH_auxilic.com:443] [MODSEC] mod_security rule [id "77350374"] at [/etc/apache2/conf.d/modsec_vendor_configs/imunify360-minimal-litespeed/010_i360_otherapps.conf:34] triggered!

[Tue May 21 13:52:59.503008 2024] [error] [client 47.128.125.29] ModSecurity: Access denied with code 403, [Rule: 'REQUEST_HEADERS:User-Agent' '@contains bytespider'] [id "77350374"] [msg "IM360 WAF: Scan attempt by malicious crawler||UA:Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36||T:LITESPEED||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "www.auxilic.com"] [uri "/services/strategic-services"] [unique_id "VDpgRNDraMHPY5xVMzH29v@m"]

[modernmagic]

Fastcomet confirmed that they needed to disable modsec 'rule': '77140883' based on the following:

INFO [2024-05-24 00:49:29,031] r.defence360agent.internals.the_sink: SensorIncident({'method': 'INCIDENT', 'plugin_id': 'modsec', 'attackers_ip': '84.22.18.72', 'transaction_id': 'pT7rYW3oSxF3YZYT5P6yc4Pj', 'rule': '77140883', 'message': 'IM360 WAF: RBL block known shells||