AJet/DFeedback — pull request #3 by smic (2013-09-03 18:25:32+00:00)
Title: Fixed problem of the multipart boundaries and mod_security.

Hi,
I have a problem with the request of your DFFeedbackSender and the configuration of my hosting. They use mod_security and I found that problem comes from the special characters you use for the multipart boundaries.

I wrote little patch to fix that.

[Tue Sep 03 16:52:47 2013] [error] [client 85.180.157.73] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "www.interface-inspector.com"] [uri "/feedback/submitfeedback.php"] [unique_id "UiX3v06KWXQAAECU4MAAAADP"]
[Tue Sep 03 16:52:47 2013] [error] [client 85.180.157.73] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "REQBODY_ERROR" required. [file "/etc/apache2/modsec2/00_asl_z_antievasion.conf"] [line "36"] [id "330791"] [msg "Failed to parse request body. This may be an impedence mismatch attack, a broken application or a broken connection. This is not a false positive. Check your application or client for errors."] [data "Multipart: Invalid boundary in C-T (characters)."] [severity "CRITICAL"] [hostname "www.interface-inspector.com"] [uri "/feedback/submitfeedback.php"] [unique_id "UiX3v06KWXQAAECU4MAAAADP"]