Recent Topics

1 Jul 12, 2014 06:49    

I'm using 5.0.5-stable but hope to upgrade to the latest version soon.

My issue is that my web host has set modsecurity so that I can't allow people to post URLs in the comments. This means any URLs in the "website" field will cause a 'forbidden' error message to appear. Adding a URL (say, apple.com) into the comment field will cause the same error, and adding a hyperlink (<a href=" etc etc" >apple< /a>) will also cause that error. Anonymous people can add a URL as checked in the blog settings, and html is also allowed in the comments as per blog settings.

Now my web host offered a solution which is to force people to register before commenting, which is something that I don't want to do. But I do want people to be able to link to things in the comments. The only other suggestion from my web host was to find some way to strip the URL to plain text, but as you can see from the above, leaving out the html and just posting the domain name doesn't work.

This is the error message:

Forbidden

You don't have permission to access /htsrv/comment_post.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Does anyone have any suggestions on how to allow links in comments? Or at least, for me to add in some sort of error notification that tells people not to use links at all?

Thanks!

3 Jul 14, 2014 06:17

Hmmm... I don't seem to have autolink plugin installed. Smilies, twitter, auto p, and texturize are the only things installed for that blog.

... Aha - I tried installing the autolink plugin, turned off rendering to comments and added a comment with a plain URL in it. It works. It even works if I turn rendering on for comments, and add a hyperlink using HTML (at least for logged in members).

The blog still prevents anonymous URLs, but that's ok since they can now add links in the comment field itself.

Thanks so much mgsolipa! Handy to know that this plugin is needed for adding in URLs to comments. :)


Form is loading...