Author Topic: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious" (Read 2784 times)

WisTex · December 07, 2008, 07:29:29 pm

When we try to add a link in the Confirmation E-mail of a CiviEvent, we get the following error:

Quote

Sorry. A non-recoverable error has occurred.

Your activity is a bit suspicious, hence aborting

Return to home page.

The URLs we are trying to add is:

http://www.operationcaredallas.org/docs/Integrity_Pledge_&_Waiver_Form_Adult.pdf
http://www.operationcaredallas.org/docs/Integrity_Pledge_&_Waiver_Form_Minor.pdf

Why I am getting this error? We need people to download this PDF and sign it, so we are trying to put a reminder on the confirmation e-mail, but adding a URL apparently is "suspicious."

Donald Lobo · December 07, 2008, 09:36:32 pm

1. Can you check your CiviCRM.log file and get more details on the error

2. You might want to file a forum post here: http://forum.php-ids.org/ (we use that for intrusion detection) and try to figure out why adding a link gives it such a high score.

3. For the short term, you can edit: CRM/Core/IDS.php

Code: [Select]

    private $threshold = array(
                               'log'      => 25,
                               'warn'     => 50,
                               'kick'     => 75
                               );

and adjust the 'kick' number to something that will allow you to add the link

lobo

WisTex · December 11, 2008, 07:55:38 am

Quote

<p><big><b>PLEASE PRINT THE CONFIRMATION E-MAIL (OR THIS PAGE) AND BRING IT WITH YOU TO THE EVENT FOR EXPRESS CHECK IN!</b></big>
<br>The Confirmation E-mail was sent to the address you provided.

The above text triggers it too. I think it is way to sensitive.

Donald Lobo · December 11, 2008, 09:22:25 am

i've added a few more exceptions to the checks. I suspect we will revisit it and restructure it in 2.3 and skip IDS checks for the admin and configuration pages

the relevant diff is here: http://fisheye.civicrm.org/browse/CiviCRM/branches/v2.1/CRM/Core/IDS.php?r1=18447&r2=18704

You will also need to delete: files/civicrm/upload/Config.IDS.ini (for drupal, standalone) or media/civicrm/upload/Config.IDS.ini (for joomla)

lobo

cgnicholas · September 13, 2009, 05:57:32 pm

yeah - I'm seeing this same message:

"Sorry. A non-recoverable error has occurred.
Your activity is a bit suspicious, hence aborting
Return to home page."

when trying to submit the 'advance settings' of a profile, as per:

http://en.flossmanuals.net/CiviCRM/CapturingExposing

This is really stressful, since we need to post this page tomorrow

well blindly tweek that file and the 'kick' value, though I have *-No-* clue as to what I am doing...

any help appreciated...
Chris

cgnicholas · September 13, 2009, 06:20:31 pm

sure enough, bumping this up past 100 allowed me to submit the form ... $:-\$

Chris

Donald Lobo · September 13, 2009, 07:23:29 pm

can u reproduce this on demo and give us the sequence of steps including the input data to do so

lobo

CiviCRM Community Forums (archive)

News:

Author Topic: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious" (Read 2784 times)

WisTex

Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

Donald Lobo

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

WisTex

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

Donald Lobo

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

cgnicholas

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

cgnicholas

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"

Donald Lobo

Re: Adding URL to the Confirmation Email of a CiviEvent is "Suspicious"