CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Is there an easy way to turn off / disable IDS?
Pages: [1]

Author Topic: Is there an easy way to turn off / disable IDS?  (Read 16804 times)

demeritcowboy

  • Ask me questions
  • ****
  • Posts: 570
  • Karma: 42
  • CiviCRM version: Always the latest!
  • CMS version: Drupal 6 mostly, still evaluating 7.
  • MySQL version: Mix of 5.0 / 5.1 / 5.5
  • PHP version: 5.3, usually on Windows
Is there an easy way to turn off / disable IDS?
March 19, 2010, 06:54:53 am
other than editing IDS::react()

Thanks

Michael McAndrew

  • Forum Godess / God
  • I live on this forum
  • *****
  • Posts: 1274
  • Karma: 55
    • Third Sector Design
  • CiviCRM version: various
  • CMS version: Nearly always Drupal
  • MySQL version: 5.5
  • PHP version: 5.3
Re: Is there an easy way to turn off / disable IDS?
March 19, 2010, 07:30:46 am
Sorry I can't be more helpful but I am interested in why do you want to do that?

Is it something to do with switching between servers?
Service providers: Grow your business, build your reputation and support CiviCRM. Become a partner today

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Is there an easy way to turn off / disable IDS?
March 19, 2010, 08:07:59 am

any specific reason you want this?

i've been thinking that maybe we should add it as an option in civicrm.settings.php that folks can suppress IDS if causing them grief. But that opens up the whole injection exploits (to some extent) and hence have been reluctant to do so

lobo


A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

demeritcowboy

  • Ask me questions
  • ****
  • Posts: 570
  • Karma: 42
  • CiviCRM version: Always the latest!
  • CMS version: Drupal 6 mostly, still evaluating 7.
  • MySQL version: Mix of 5.0 / 5.1 / 5.5
  • PHP version: 5.3, usually on Windows
Re: Is there an easy way to turn off / disable IDS?
March 19, 2010, 10:15:41 am
It's because our site isn't public so we're not concerned about exploits, and it seems to cause problems with civireports and when email threads are copied and pasted.

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Is there an easy way to turn off / disable IDS?
March 19, 2010, 11:03:26 am

wnat to file an issue and a patch

create a constant in civicrm.settings.php CIVICRM_IDS_DISABLE

if that constant is set and true then in CRM/Core/Invoke.php (line 76 or so), skip the IDS check

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

demeritcowboy

  • Ask me questions
  • ****
  • Posts: 570
  • Karma: 42
  • CiviCRM version: Always the latest!
  • CMS version: Drupal 6 mostly, still evaluating 7.
  • MySQL version: Mix of 5.0 / 5.1 / 5.5
  • PHP version: 5.3, usually on Windows
Re: Is there an easy way to turn off / disable IDS?
March 22, 2010, 10:46:52 am
CRM-5985

WeChewie

  • Guest
Re: Is there an easy way to turn off / disable IDS?
March 24, 2010, 09:36:00 am
Quote from: Donald Lobo on March 19, 2010, 08:07:59 am

any specific reason you want this?

i've been thinking that maybe we should add it as an option in civicrm.settings.php that folks can suppress IDS if causing them grief. But that opens up the whole injection exploits (to some extent) and hence have been reluctant to do so

lobo




I just wanted to add another data point to this thread and say that I just encountered some problems with IDS also. It wasn't allowing me to submit a new contribution page (suspicious activity, bad HTML, and HENCE it dropped my submission and asked me to access the home page). Searching on the forums indicated the problem was due to some extra tags added by the WYSIWYG editor that caused IDS to reject the form submission, so I turned the WYSIWYG editor off - but it was enabled by default durnig the install so there shouldn't have been a problem...

Andy Laken

  • I’m new here
  • *
  • Posts: 27
  • Karma: 3
Re: Is there an easy way to turn off / disable IDS?
February 25, 2011, 12:33:34 pm
For clarity, here's what you need to add to civicrm.settings.php to disable IDS:

/*
 * If you want to disable IDS, set this to 0.
 */
define( 'CIVICRM_IDS_ENABLE', 0 );

Full details here:
http://issues.civicrm.org/jira/browse/CRM-5985?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel
Andy Laken
Engineer | CivicActions, LLC
e: andy.laken@civicactions.com | skype: mcantsin | http://twitter.com/alaken

xavier

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4453
  • Karma: 161
    • Tech To The People
  • CiviCRM version: yes probably
  • CMS version: drupal
Re: Is there an easy way to turn off / disable IDS?
February 28, 2011, 03:59:57 am
Hi,

Worth repeating that you are increasing your risk of having your install hacked by disabling the intrusion detection.

If you have this error message, worthwhile trying to see what's wrong in the html you are trying to paste and try to fix that instead of bypassing alltogether the IDS protection.

X+
-Hackathon and data journalism about the European parliament 24-26 jan. Watch out the result

clemenbor

  • I’m new here
  • *
  • Posts: 16
  • Karma: 1
  • CiviCRM version: 4.1.5
  • CMS version: Drupal 6
  • MySQL version: 5.1.48
  • PHP version: 5.2.1
Re: Is there an easy way to turn off / disable IDS?
March 13, 2013, 02:53:19 am
Hi,

In my case I´ve problems when I try to save the contact information when I try to include an image, to the only difference is when I insert, for instance, the google logo:

<img src="https://www.google.es/images/srpr/logo4w.png" />

Any idea??

Thanks!

rhrueda

  • I post occasionally
  • **
  • Posts: 45
  • Karma: 0
  • CiviCRM version: 4.4.3
  • CMS version: Drupal Pressflow 6.22
  • MySQL version: 5.5.22
  • PHP version: 5.3.10
Re: Is there an easy way to turn off / disable IDS?
March 13, 2013, 02:54:57 am
Hi, the same problem with the images is happening to me.

Thanks!
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Is there an easy way to turn off / disable IDS?

This forum was archived on 2017-11-26.