Error while creating CiviMail header

[Neil Adair]

Drupal 6.4, CiviCRM 2.1 beta4

Sorry. A non-recoverable error has occurred.

Your activity is a bit suspicious, hence aborting

Return to home page.

 

I get this when I paste in the same messages (with name changes) I've used successfully on a number of CiviMail installs.

Will investigate other components and the message to try to narrow it down.

Neil

[Neil Adair]

This seems to be a result of more stringent constraints on html rather than a bug

Neil

[Brainwrap]

I keep getting the same error message ("suspicious activity"). I've successfully sent out several mailings, but now it keeps giving me that error every time I try to get past Step 3 (it'll let me compose the message, but I can't get to the Test Mailing page).

This happened under 2.1 Beta 3 and is still happening under 2.1 Beta 4.

[Neil Adair]

I found that if I stripped down the html to a minimum CiviMail would accept it. Not a bad idea anyway if you don't want emails to end up in spam folders.

Neil

[Donald Lobo]

we've added intrusion detection code in the 2.1 version of CiviCRM (www.php-ids.org). For html elements it uses htmlpurifier and returns back a score. For sufficiently high scores we abort the operation

You can tweak the levels at: CRM/Core/IDS.php

at some point, we'll make those levels configurable and log all attempts in the DB that generated some warning (we currently log them in CiviCRM.log)

lobo

[Brainwrap]

we've added intrusion detection code in the 2.1 version of CiviCRM (www.php-ids.org). For html elements it uses htmlpurifier and returns back a score. For sufficiently high scores we abort the operation

You can tweak the levels at: CRM/Core/IDS.php

at some point, we'll make those levels configurable and log all attempts in the DB that generated some warning (we currently log them in CiviCRM.log)

Ah-hah! That seems to have done the trick; I bumped it from 50 to 100 and it worked this time. Thanks!

However, the settings seem to be way off--the HTML message I was sending was basically just a couple of paragraphs of text, one email link and one URL link, with a couple of bold-faced lines. Hardly the sort of code which should have been setting anything off...

[petednz]

Oddly I had this problem saving due to having (in Text field) a phone number formatted as
Phone: +64 (4) 801 XXXX


When I changed to
Phone: +64 4 801 5812

So maybe avoid brackets?