Hello,
I have enabled waf on de plesk port.
After the upgrade a couple plesk pages get a 404 on all machines
like the client backup page, the client ftp account page and also the client cert page.
These pages get a 404 page not found.
If i disable to use WAF on plesk ports it's all working again.
Greetz
ASL WAF update broke plesk pages
-
- Atomicorp Staff - Site Admin
- Posts: 8355
- Joined: Wed Dec 31, 1969 8:00 pm
- Location: earth
- Contact:
Re: ASL WAF update broke plesk pages
Is it because the URL's have @ in them?
Re: ASL WAF update broke plesk pages
yep they have. How to fix it i needed to disable waf to fix it.
Re: ASL WAF update broke plesk pages
Any solution to this i really like to enable WAF on plesk panel
-
- Atomicorp Staff - Site Admin
- Posts: 8355
- Joined: Wed Dec 31, 1969 8:00 pm
- Location: earth
- Contact:
Re: ASL WAF update broke plesk pages
That @ is a reserved character in http, its the delimiter between a username/password and hostname in an HTTP Auth connection. Plesk is using that character in a way it shouldnt, and its out of compliance with the protocol. To "fix" that would mean breaking the Http auth.
- mikeshinn
- Atomicorp Staff - Site Admin
- Posts: 4149
- Joined: Thu Feb 07, 2008 7:49 pm
- Location: Chantilly, VA
Re: ASL WAF update broke plesk pages
It looks like newer versions of Plesk are using this character correctly now.
Michael Shinn
Atomicorp - Security For Everyone
Atomicorp - Security For Everyone
Re: ASL WAF update broke plesk pages
as in 12+ ?
--------------------------------
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>