[mod-security-users] SecUploadApproveScript error
Brought to you by:
victorhora,
zimmerletw
|
From: Daniel S. <dan...@gm...> - 2005-12-19 17:05:07
|
Hi all...
I´m with a doubt...
My mod_sec in apache is
<IfModule mod_security.c>
# Turn the filtering engine On or Off
SecFilterEngine On
# Make sure that URL encoding is valid
SecFilterCheckURLEncoding On
# Unicode encoding check
SecFilterCheckUnicodeEncoding Off
# Only allow bytes from this range
SecFilterForceByteRange 0 255
# Only log suspicious requests
SecAuditEngine RelevantOnly
# The name of the audit log file
SecAuditLog logs/audit_log
# Debug level set to a minimum
SecFilterDebugLog logs/modsec_debug_log
SecFilterDebugLevel 0
# Should mod_security inspect POST payloads
SecFilterScanPOST On
SecUploadDir /tmp
SecUploadApproveScript "/usr/local/bin/phpvalida"
SecUploadKeepFiles Off
# By default log and deny suspicious requests
# with HTTP status 500
SecFilterDefaultAction "deny,log,status:500"
</IfModule>
My Upload approve script is:
#!/usr/local/bin/php
<?php
$assunto = "UPLOAD DE ARQUIVO";
$de = "Alerta - HospedaVIP";
$emailde = "hos...@ho...";
$headers ="Content-Type: text/html; charset=iso-8859-1\n";
$headers .= "From: $de <$emailde>\n";
$headers .= "Reply-to: $de <$emailde>\n";
$mensagem = "UPLOAD DE ARQUIVO: $argv[1]";
mail($emailde,$assunto,$mensagem,$headers);
echo "1 deu certo\n";
?>
*just a script that sends an email telling me that a file was uploaded, then
prints 1 :)
My debug log:
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a37bc84]
[/projetos/envia.php] sec_check_access [path=(null)]
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a37bc84]
[/projetos/envia.php] Filtering off for a subrequest
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] sec_check_access [path=(null)]
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] Normalised REQUEST_URI: /projetos/envia.php
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] Parsing arguments...
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] Read 9327 bytes from POST [r=a807a3c]
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] content-type = "multipart/form-data; boundary=------------
---------------7d5bb242c0836"
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] multipart_process_boundary
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] multipart_process_data_chunk: state=0, size=152
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] multipart_process_data_chunk: got attribute name "file"
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] multipart_process_data_chunk: got attribute
filename "C:\\Documents and Settings\\Daniel Schultz\\Meus
documentos\\Daniel\\Backups - 17-06-2005\\66041.jpg"
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] verify_uploaded_files:
executing "/usr/local/bin/phpvalida" to verify "/tmp/20051219-142640-
201.8.167.208-66041.jpg"
[19/Dec/2005:14:26:40 -0200] [www.hospedavip.com/sid#a09b59c][rid#a807a3c]
[/projetos/envia.php] Access denied with code 500. Error verifying files:
Received no output from the approver script (execution
failed?) "/usr/local/bin/phpvalida"
----------
Every time is:
Access denied with code 500. Error verifying files: Received no output from
the approver script (execution failed?) "/usr/local/bin/phpvalida"
My script is right...what els could generate this error?
Thanks
Daniel
|