+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: Announcements (https://sinister.ly/Forum-Announcements)
+---- Forum: Suggestions (https://sinister.ly/Forum-Suggestions)
+----- Forum: Old Suggestions (https://sinister.ly/Forum-Old-Suggestions)
+----- Thread: Remove cloudflare text filter (/Thread-Remove-cloudflare-text-filter)
Remove cloudflare text filter - Inori - 11-17-2016
There's a filter on SL's instance of cloudflare's WAF that blocks posts based on a very loose assumption that there might be an attempt at SQL injection or some keyword hidden in there somewhere.
Given the fact MyBB escapes all user input and uses prepared statements, why do we need a filter that triggers false alarms fairly often?
RE: Remove cloudflare text filter - Oni - 11-17-2016
You're not the first to complain.
RE: Remove cloudflare text filter - Dyme - 11-17-2016
(11-17-2016, 07:27 PM)Ao- Wrote: Given the fact MyBB escapes all user input and uses prepared statements, why do we need a filter that triggers false alarms fairly often?
Famous last words
RE: Remove cloudflare text filter - Inori - 11-17-2016
(11-17-2016, 10:11 PM)Oni Wrote: You're not the first to complain.
It's happened to me four times with different 150+ line threads :|
RE: Remove cloudflare text filter - mothered - 11-18-2016
I'm with you on this.
I've posted a few threads of when I've compromised websites, and attempted to also post the methodology used In code. I couldn't do so, hence just kept the tutorial short without any coded text. I could've taken screenshots of the code used and posted It In Image format, but why should It resort to that when It can be avoided.
I fully support this suggestion.
RE: Remove cloudflare text filter - Inori - 11-22-2016
As a follow up, is this happening? Even just an improvement of the filters would be awesome.