CiviCRM Community Forums (archive)

Hi

We added some custom fields to events and were adding images to the fields using the WYSIWYG editor (CK editor).
CiviCRM kept throwing a IDS (intrusion detection system) error and reported the behaviour as suspicious.
So we have added some exceptions to the Config.IDS.ini file. Copying some details from the Civi error log we added the following exceptions in BOLD below

[General]
    filter_type         = xml
    filter_path         = /home/.../drupal/sites/all/modules/civicrm/packages/IDS/default_filter.xml
    tmp_path            = /home/.../sites/default/files/civicrm/sites/default/files/civicrm/upload/
    HTML_Purifier_Path  = IDS/vendors/htmlpurifier/HTMLPurifier.auto.php
    HTML_Purifier_Cache = /home/.../sites/default/files/civicrm/sites/default/files/civicrm/upload/
    scan_keys           = false
    exceptions[]        = __utmz
    exceptions[]        = __utmc
    exceptions[]        = widget_code
    exceptions[]        = html_message
    exceptions[]        = text_message
    exceptions[]        = body_html
    exceptions[]        = msg_html
    exceptions[]        = msg_text
    exceptions[]        = msg_subject
    exceptions[]        = description
    exceptions[]        = intro
    exceptions[]        = thankyou_text
    exceptions[]        = intro_text
    exceptions[]        = body_text
    exceptions[]        = footer_text
    exceptions[]        = thankyou_text
    exceptions[]        = tf_thankyou_text
    exceptions[]        = thankyou_footer
    exceptions[]        = thankyou_footer_text
    exceptions[]        = new_text
    exceptions[]        = renewal_text
    exceptions[]        = help_pre
    exceptions[]        = help_post
    exceptions[]        = confirm_title
    exceptions[]        = confirm_text
    exceptions[]        = confirm_footer_text
    exceptions[]        = confirm_email_text
    exceptions[]        = report_header
    exceptions[]        = report_footer
    exceptions[]        = data
    exceptions[]        = instructions
    exceptions[]        = suggested_message
    exceptions[]        = page_text
    exceptions[]        = custom_104_4
    exceptions[]        = custom_105_4
    exceptions[]        = custom_106_4

After the changes the IDS error has stopped when we add the images to the 3 custom fields. BUT we now don't know if it has stopped because we did the right thing or because the IDS checked has stopped working after the changes.

Does anyone know if the changes we have made are correct?

Cheers
Olly