Re: [mod-security-users] POST approve script hangs

[Ivan R. <iv...@we...>]

> I have made a SecUploadApproveScript to accept or deny
> files depending upon extension (.exe .cmd etc). And it
> works ok, with small files. But if I try to upload a
> file of abt. 1 MB or so it just hangs there forever.
> 
> I'm using mod_security 1.8.4, and now I see that 1.8.5
> is out, is this something which is fixed in .5? Also
> I'm using Apache 2.0.50 on FedoraCore 2.

  There have been some changes in that area but the problems
  only manifested on Windows, not on Unix platforms. But
  I do suggest you try 1.8.5 to see if it performs better.

  I use a 9 MB file for testing prior to making new releases
  and I haven't noticed anything suspicious. I've tested on
  Windows and Unix.

  The approve script execution should not depend on file
  size. Are you seeing problems only when you enable
  approval or at all times during upload (of large
  files)?

  Please enable debug logging and set log level 9, and then
  send me the output. It will be rather large so I suggest
  you send it to my email only - I'll inform the list later
  if a problem is found.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]