Author Topic: non-recoverable error occurs on creating an activity having <a> tag in "Details" (Read 461 times)

aeszq · April 23, 2014, 07:06:56 pm

Hi,

We are using CiviCRM 3.4.7 and Drupal6. A non-recoverable error occurs when creating activities which have <a> tag in the Details field. The error message says "There is a validation error with your HTML input. Your activity is a bit suspicious, hence aborting". It happens under HTTPS only, HTTP is fine. I did some digging. It seems that CiviCRM uses PHPIDS to handle the input security. Do you guys know to make it allow <a> tag? Is there an configuration I can change for PHPIDS? Thanks in advance.

P.S. We have testing site(CiviCRM 4.4.5 Drupal7 ) running on HTTPS on the same server. It doesn't have this issue.

Cheers,
George

xavier · April 24, 2014, 12:19:15 am

Hey,

You seem to have found the solution: upgrade and it will be fine.

There is an option to disable the IDS, but that's obviously a bad idea to lower the security on a system that is already found to have unpatched security issues.

Did I mention you should upgrade?

aeszq · April 27, 2014, 05:13:49 pm

Thanks, Xavier. I have updated the IDS module and it did the trick. This is a temporary solution before the system is upgraded to the latest CiviCRM version.

CiviCRM Community Forums (archive)

News:

Author Topic: non-recoverable error occurs on creating an activity having <a> tag in "Details" (Read 461 times)

aeszq

non-recoverable error occurs on creating an activity having <a> tag in "Details"

xavier

Re: non-recoverable error occurs on creating an activity having <a> tag in "Details"

aeszq

Re: non-recoverable error occurs on creating an activity having <a> tag in "Details"