Author Topic: The meta-thread for: Your activity is a bit suspicious, hence aborting (Read 28572 times)

CiviTeacher.com · July 20, 2011, 01:26:03 pm

IDS intrusion systems are somewhat session and IP specific, this explains "works in Chrome, not in Firefox". You could disable IDS or upgrade to 3.4, where Lobo made an exception for IDS for all administrator users.

dlats · August 23, 2011, 12:18:32 pm

Using drupal 7.7, civicrm 4.0.5, with ckeditor in a custom field (added to organization contact type) using jwplayer plugin, I get the error message.

The code that jwplayer plugin is embedding is:

<object align="left" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" data="http://ncca-demo.com/drupal-7.0/sites/all/modules/civicrm/packages/ckeditor/plugins/jwplayer/jwplayer/player.swf"><param name="allowFullScreen" value="false" /><param name="loop" value="false" /><param name="play" value="false" /><param name="menu" value="false" /><param name="quality" value="high" /><param name="wmode" value="window" /><param name="allowScriptAccess" value="always" /><param name="scale" value="noborder" /><param name="movie" value="http://ncca-demo.com/drupal-7.0/sites/all/modules/civicrm/packages/ckeditor/plugins/jwplayer/jwplayer/player.swf" /><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="flashvars" value="file=http://ncca-demo.com/drupal-7.0/sites/default/files/users/user1/20051210-w50s.flv&autostart=true" /><embed allowfullscreen="false" allowscriptaccess="always" flashvars="file=http://ncca-demo.com/drupal-7.0/sites/default/files/users/user1/20051210-w50s.flv&autostart=true" id="player1" loop="false" menu="false" name="player1" play="false" quality="high" scale="noborder" src="http://ncca-demo.com/drupal-7.0/sites/all/modules/civicrm/packages/ckeditor/plugins/jwplayer/jwplayer/player.swf" wmode="window"></embed></object>

It worked fine in civicrn 4.0.2

bavariansepp · September 25, 2011, 01:43:11 am

1. CMS DRUPAL 7.8
2. CiviCRM 4.0.5

3. The type of data you were editing: No data editing at all ... completely fresh install, from first click when trying to access CiviCRM
4. The exact text : no text editing yet
5. Did the error begin to appear after an upgrade: error started on completely fresh installation of CiviCRM 4.0.5
6. Is this a new page/profile, or a page/profile that has existed a while? My site has been upp and running for a while

This error appears in Safari Webbrowser ... but does not appear in Firefox .... not tested any other browsers yet

CiviTeacher.com · September 28, 2011, 10:35:08 am

I'm sorry I don't understand what you mean by:

Quote

The exact text : no text editing yet

If you feel you are getting this error inappropriately, you can disable IDS detection in your civicrm.settings.php file

ironicsky · January 31, 2012, 01:45:13 pm

1. Your CMS software: Joomla 1.7.3
2. Your CiviCRM software: 4.0.8
3. The type of data you were editing: Clicking the extensions link from the menu to /administrator/index.php?option=com_civicrm
4. Was not editing any text... simply clicked the link
5. Never previously installed
6. New installation

Edit: This occurs in Firefox Aurora 11.0a2 but works fine in Internet Exploder 9

scrubba · February 28, 2012, 04:31:54 pm

1. Your CMS software and version (i.e. Drupal 6.22)
2. Your CiviCRM software and version (i.e. 3.4.6)
3. The type of data you were editing: Civimail Bulk Email to 4000 contacts - step 3 Mailing Content - attempting to go to next step (4) or Save - same failed result
4. The exact text you were editing, in its entirety:
This is a long weekly newsletter with some 50+ links - We have similar problems every week. The html version by itself saves ok. When we go to add the txt version we tend to get the error. We have tried removing various sections of the txt and it will save from time to time, but this is never consistent in that - We can take one paragraph out, and it will save Ok, put it back in, then take another paragraph out, and that will also save. Put them both in, and it will fail.
(i can post full txt / html if still required)

Possible Conclusion? : IDS is limiting the amount of links or txt or similar we can have in one email? Is this possible, and is there anything we can do to get past this..

5. Did the error begin to appear after an upgrade, if so what version->version? No
6. Is this a new page/profile, or a page/profile that has existed a while? NO

Have tried different browsers - same result

Any assistance greatly appreciated..

Scrubba (Chris)

scrubba · February 29, 2012, 04:46:04 pm

re My above issue
i tried to add another exception line to IDS.php
exceptions[] = txt_message
which looks like the field in question
and there already was
exceptions[] = html_message
but this didn't fix

still working on it

ncoughlin · March 20, 2012, 10:05:08 am

CMS: Joomla 2.5.3
CiviCRM: 4.1.0

I am getting this error message when I try to navigate to CiviCRM as a super admin in GOOGLE CHROME:

Quote

CiviCRM-001 - An error has occurred.
Sorry. A non-recoverable error has occurred.
There is a validation error with your HTML input. Your activity is a bit suspicious, hence aborting
Return to home page.

Return to Control Panel

When I navigate to CiviCRM in Firefox I get in just fine. What confuses me, though, is that I have never had a problem using Chrome in the past. I logged in this morning and tried to open CiviCRM and it gave me the error message.

Do I need to change something in the source code?

Coleman Watts · May 15, 2012, 08:42:42 pm

Woolman is having a problem where staff cannot use html custom fields because almost anything they enter gets rejected.
I understand the IDS is an external library, but this is a show-stopper, so I've plugged the dyke with a simple workaround - don't reject input from people who have 'access CiviCRM' permissions.

Code: [Select]

CRM/Core/IDS.php line 164:
        $impact = $result->getImpact( );
--      if ($impact >= $this->threshold['kick']) {
++      if ($impact >= $this->threshold['kick'] && !user_access('access CiviCRM')) {
            $this->log($result, 3, $impact);
            $this->kick($result);

Note that this solution uses a drupal function, but I don't remember offhand the cms-agnostic way to do it.

johndieter · May 30, 2012, 02:01:14 pm

Someone PLEASE tell how to get rid of this "a bit suspicious" ERROR!!!! simply adding an A href=".. causes this.
IMPOSSIBLE to use software at all until this is fixed!! I'm on 4.1 drupal 7

johndieter · May 30, 2012, 02:04:25 pm

someone PLEASE tell how to turn off this "feature" which makes civi unusable.

Coleman Watts · May 30, 2012, 02:47:11 pm

@johndieter: I already did - see post above

Donald Lobo · May 30, 2012, 10:50:05 pm

Not recommended, BUT u can disable IDS completely in civicrm.settings.php

/*
* If you want to disable IDS, set this to 0.
*/
define( 'CIVICRM_IDS_ENABLE', 1);

lobo

xavier · May 31, 2012, 01:42:12 am

Quote from: johndieter on May 30, 2012, 02:01:14 pm

Someone PLEASE tell how to get rid of this "a bit suspicious" ERROR!!!! simply adding an A href=".. causes this.

I doubt that it's what makes the IDS stop it (sent plenty of emails with links

. It might be that you have pasted from word, that put a gigantic amount of hidden crap around the content you paste (seriously, it's insane). use the paste from word function if you are using the wysiwyg editor, or upload the content that you have cleaned elsewhere

otherwise, you can disable the IDS as lobo explained, but it means you are taking off one layer of protection, making your install more at risk.

scrubba · June 14, 2012, 06:43:31 pm

In the end i followed Lobos advice and added that code to that file, and changed number.

This has fixed the issue for me

so thankyou...

but perhaps work will need to be done on what is actually causing this strange behavior down the track..

CiviCRM Community Forums (archive)

News:

Author Topic: The meta-thread for: Your activity is a bit suspicious, hence aborting (Read 28572 times)

CiviTeacher.com

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

dlats

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

bavariansepp

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

CiviTeacher.com

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

ironicsky

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

scrubba

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

scrubba

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

ncoughlin

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

Coleman Watts

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

johndieter

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

johndieter

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

Coleman Watts

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

Donald Lobo

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

xavier

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting

scrubba

Re: The meta-thread for: Your activity is a bit suspicious, hence aborting