Cannot PM

Questions about the project and the distribution - obviously no support questions here please
Sparhawk
Level 1
Level 1
Posts: 8
Joined: Wed Jan 18, 2012 11:22 pm

Cannot PM

Postby Sparhawk » Fri Aug 25, 2017 7:57 am

I'm trying to PM someone. It worked fine a few days ago, but now I get the following error:

Code: Select all

Website Firewall
Back to sucuri.net
Access Denied - Sucuri Website Firewall

If you are the site owner (or you manage this site), please whitelist your IP or if you think this block is an error please open a support ticket and make sure to include the block details (displayed in the box below), so we can assist you in troubleshooting the issue.
Block details:
Your IP:    <REDACTED>
URL:    forums.linuxmint.com/ucp.php?i=pm&mode=compose&action=reply&sid=<REDACTED>&p=<REDACTED>
Your Browser:    Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/51.0.2704.79 Chrome/51.0.2704.79 Safari/537.36
Block ID:    RCE010
Block reason:    Exploit attempt denied.
Time:    Fri Aug 25 07:50:44 2017
Server ID:    11008
© 2017 Sucuri Inc. All rights reserved.

I actually use a VPN as a matter of course. However, I disabled it and it still came up with the error. I also tried Chromium as well as Firefox, but no difference. How can I PM another user again?

User avatar
xenopeek
Level 24
Level 24
Posts: 21367
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Cannot PM

Postby xenopeek » Fri Aug 25, 2017 8:14 am

I've just sent you a PM. Can you check whether you can read it without Sucuri blocking you and try and send me a reply?
Image

Sparhawk
Level 1
Level 1
Posts: 8
Joined: Wed Jan 18, 2012 11:22 pm

Re: Cannot PM

Postby Sparhawk » Fri Aug 25, 2017 8:20 am

Yes that all works. I then tried the other PM again and that failed again too. I guess something to do with the content? It's nothing outrageously weird… a bit of code I suppose.

User avatar
xenopeek
Level 24
Level 24
Posts: 21367
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Cannot PM

Postby xenopeek » Fri Aug 25, 2017 8:24 am

The code included in the PM is probably the problem.
Image

User avatar
xenopeek
Level 24
Level 24
Posts: 21367
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Cannot PM

Postby xenopeek » Fri Aug 25, 2017 9:40 am

I could send you the verbatim message back in PM without problem. I have one other report of something similar odd. I'll do some more testing here.
Image

Sparhawk
Level 1
Level 1
Posts: 8
Joined: Wed Jan 18, 2012 11:22 pm

Re: Cannot PM

Postby Sparhawk » Sat Aug 26, 2017 4:01 am

xenopeek wrote:I could send you the verbatim message back in PM without problem. I have one other report of something similar odd. I'll do some more testing here.


Yes, I received it fine. Thank you for that.

Sparhawk
Level 1
Level 1
Posts: 8
Joined: Wed Jan 18, 2012 11:22 pm

Re: Cannot PM

Postby Sparhawk » Sat Aug 26, 2017 8:31 pm

I realised that I could troubleshoot without spamming the recipient, by using "preview" instead of "submit". I deleted bits of the message and deduced that the following minimal code is enough to trigger the false block.

Code: Select all

$(if

User avatar
xenopeek
Level 24
Level 24
Posts: 21367
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Cannot PM

Postby xenopeek » Tue Aug 29, 2017 12:52 pm

Yes, confirmed from our end by JCSenar: putting $( followed by two or more letters in a PM leads to a Sucuri block. We'll see if something can be done without affecting security.
Image


Return to “Non-technical Questions”

Who is online

Users browsing this forum: No registered users and 2 guests