CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site

This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • Saving unmodified Systems Message Template is aborting suspicious activity
Pages: [1]

Author Topic: Saving unmodified Systems Message Template is aborting suspicious activity  (Read 1839 times)

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Saving unmodified Systems Message Template is aborting suspicious activity
September 12, 2010, 06:04:47 pm
So on a 3.2.2 I just went in to modify a phone number in the text and html versions of the Events - Registration Confirmation and Receipt (on-line)

Got an 'aborted due to suspicious activity'

The form was fine when i first tweaked it which was pre 3.2.2

So I also tried just opening the custom 'offline' and tried saving with no changes - again it rejected the code - so it wasn't the fact that I was modifying it that was tripping the alarm.

so I reverted one of mine to Default, then opened and just hit 'save' ie I did nothing to the code - and it got rejected.

i tried the same on Demo and it saved fine.

I tried on one of our 3.2.3 ones and it was aborted.

So was this a problem in 3.2.2 and 3.2.3 that is fixed on Head - or is something else amiss?
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Saving unmodified Systems Message Template is aborting suspicious activity
September 12, 2010, 08:52:20 pm

can u check your CiviCRM*.log files and see what fields are causing the IDS message?

In a recent case, there were some domain cookies unrelated to drupal/civicrm that triggered the messsage

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Saving unmodified Systems Message Template is aborting suspicious activity
September 12, 2010, 09:21:46 pm
Not sure if what is required is on the attached - it doesn't leap out to me to be supplying what you are asking for - will try again if I am getting the wrong log

this from

/files/civicrm/templates_c/en_US/ConfigAndLog/CiviCRM.11651edbbed40b0e4cc5a195bf4c6204.log
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Saving unmodified Systems Message Template is aborting suspicious activity
September 13, 2010, 07:52:52 am

1. i think the smarty code is confusing the IDS detector

2. can u try adding msg_subject to

CRM/Core/IDS.php

and see if that fixed it

thanx

lobo

A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Saving unmodified Systems Message Template is aborting suspicious activity
October 06, 2010, 08:27:18 pm
So coming back to this at last.

In the IDS.php I see examples of

    exceptions[]        = msg_html
    exceptions[]        = msg_text
   
and

    html[]              = msg_html

So am I adding

    exceptions[]        = msg_subject
   
or

    html[]              = msg_subject

or both? Thanks.
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Saving unmodified Systems Message Template is aborting suspicious activity
October 13, 2010, 10:12:52 pm
On IRC

[10:18am]dlobo:can u remove msg_html from html[]
[10:18am]dlobo:and add msg_subject to exceptions

JIRA http://issues.civicrm.org/jira/browse/CRM-6944
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Saving unmodified Systems Message Template is aborting suspicious activity
October 18, 2010, 02:10:19 pm
Maybe i failed to implement the above  ::)

but still getting

Sorry. A non-recoverable error has occurred.
There is a validation error with your HTML input. Your activity is a bit suspicious, hence aborting

when I open the default Event offline template ie

civicrm/admin/messageTemplates/add?action=update&id=19&reset=1

and try to Save.
Code: [Select]
    filter_type         = xml
    filter_path         = {$civicrm_root}/packages/IDS/default_filter.xml
    tmp_path            = $config->uploadDir
    HTML_Purifier_Path  = IDS/vendors/htmlpurifier/HTMLPurifier.auto.php
    HTML_Purifier_Cache = $config->uploadDir
    scan_keys           = false
    exceptions[]        = __utmz
    exceptions[]        = __utmc
    exceptions[]        = widget_code
    exceptions[]        = html_message
    exceptions[]        = body_html
    exceptions[]        = msg_html
    exceptions[]        = msg_text
    exceptions[]        = msg_subject
    exceptions[]        = description
    html[]              = intro
    html[]              = thankyou_text
    html[]              = intro_text
    html[]              = body_text
    html[]              = footer_text
    html[]              = thankyou_text
    html[]              = thankyou_footer
    html[]              = thankyou_footer_text
    html[]              = new_text
    html[]              = renewal_text
    html[]              = help_pre
    html[]              = help_post

    html[]              = confirm_title
    html[]              = confirm_text
    html[]              = confirm_footer_text
    html[]              = confirm_email_text
    html[]              = report_header
    html[]              = report_footer
    html[]              = data
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

jyee

  • I’m new here
  • *
  • Posts: 19
  • Karma: 3
Re: Saving unmodified Systems Message Template is aborting suspicious activity
October 22, 2010, 09:34:12 am
FWIW,

I've gotten the same error a number of times in various areas of Civicrm
If I increase the kick threshold in CRM/Core/IDS.php from 75 to 85, it generally avoids the html error/suspicious activity error and will return more meaningful warning messages.

spikyjt

  • I’m new here
  • *
  • Posts: 9
  • Karma: 0
Re: Saving unmodified Systems Message Template is aborting suspicious activity
December 15, 2010, 09:36:48 am
Deleting files/civicrm/templates_c/en_US/ConfigAndLog/Config.IDS.ini worked for me. New exceptions have been added to the defaults in IDS.php

petednz

  • Forum Godess / God
  • I’m (like) Lobo ;)
  • *****
  • Posts: 4899
  • Karma: 193
    • Fuzion
  • CiviCRM version: 3.x - 4.x
  • CMS version: Drupal 6 and 7
Re: Saving unmodified Systems Message Template is aborting suspicious activity
December 15, 2010, 10:18:45 am
Thanks for reminding me to report back - yes clearing templates_c seems to have done it for us too
Sign up to StackExchange and get free expert advice: https://civicrm.org/blogs/colemanw/get-exclusive-access-free-expert-help

pete davis : www.fuzion.co.nz : connect + campaign + communicate

Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • Saving unmodified Systems Message Template is aborting suspicious activity

This forum was archived on 2017-11-26.