[mod-security-users] "Error normalising parameter value" error with phpmysql

[Jack F. <mo...@xj...>]

Hello Guys,

I'm currently just trying to get phpmysql to work through modsec and I have a allow all from my computer into the modsec rules, but have just encountered this error while trying to delete users from the mysql user table:

==0f82d97e==============================
Request: 10.1.1.37 10.1.1.10 - - [27/Sep/2006:22:25:46 +1200] "POST /phpmyadmin/server_privileges.php HTTP/1.1" 403 307 "https://10.1.1.37:8080/phpmyadmin/server_privileges.php?" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060812 Firefox/1.5.0.6" - "-"
----------------------------------------
POST /phpmyadmin/server_privileges.php HTTP/1.1
Host: 10.1.1.37:8080
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060812 Firefox/1.5.0.6
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: https://10.1.1.37:8080/phpmyadmin/server_privileges.php?
Cookie: phpMyAdmin=Hokf7,pkRfjIH-ze1KTrpHtc690; pma_lang=en-utf-8; pma_charset=iso-8859-1; pma_collation_connection=utf8_general_ci
Authorization: Basic cm9vdDpRcDQzWGoxOQ==
Content-Type: application/x-www-form-urlencoded
Content-Length: 113
mod_security-message: Access denied with code 403. Error parsing POST parameters: Error normalising parameter value: Invalid character detected [27] [severity "EMERGENCY"]
mod_security-action: 403

113
selected_usr%5B%5D=%1B%25&selected_usr%5B%5D=thearcbot%1B%25&selected_usr%5B%5D=tws_tester%1B%25&mode=2&delete=Go

HTTP/1.1 403 Forbidden
Content-Length: 307
Keep-Alive: timeout=15, max=72
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
--0f82d97e--


I'm just wondering if anyone can help me figure out what is causing this problem.

Cheers.

From,
Jack