403 Forbidden Error Page during search query using apostrophe

Home Forums BulletProof Security Pro 403 Forbidden Error Page during search query using apostrophe

This topic contains 4 replies, has 2 voices, and was last updated by  Living Miracles 2 weeks ago.

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #35859

    Living Miracles
    Participant

    Hi,

    When I do a search query in the WordPress “Posts” area search bar for something that contains an apostrophe (or single quotation mark), like “What’s underneath emotions”, I get a BPS Pro 404 Error page. I’m guessing it has something to do with the “CUSTOM CODE BPSQSE BPS QUERY STRING EXPLOITS” code in my .htaccess file, but removing certain things from there, didn’t resolve the issue.

    Could you tell me how to resolve this issue?

    Thank you!
    Jutta

    #35860

    AITpro Admin
    Keymaster

    The single quote code character/apostrophe is 1 of the 5 most dangerous code characters. So obviously I would recommend that you do not whitelist/allow single quote code characters in searches on your website, but if you want to allow this then the information is below to allow/whitelist this.  A question mark should not be blocked by anything in BPS.  So maybe you Mod Security enabled.  I believe Mod Security blocks single quote characters/apostrophes and may also block question marks.  It is baffling to me that single quote characters are not automatically stripped out of searches.  WP strips out dangerous code characters everywhere else???????

    Solution for allowing apostrophe’s/single quote code characters in search forms on the frontend of your website:  http://forum.ait-pro.com/forums/topic/apostrophe-single-quote-code-character/#post-6939

    Solution for allowing apostrophe’s/single quote code characters in search forms on the backend of your website:  http://forum.ait-pro.com/forums/topic/search-string-403-error/#post-14372

    #35863

    Living Miracles
    Participant

    Ok, thank you so much! I appreciate that. I’ll just do my searches differently then. Obviously I can search for “underneath emotions” and that’ll bring up the right post for me as well 🙂

    Thank you!

    #35864

    AITpro Admin
    Keymaster

    Wise choice.  If it is only you that is affected by searches and not visitors to your website then there is really no reason to search for grammatically correct search terms.  😉

    #35865

    Living Miracles
    Participant

    Yes, it’s just in the backend where this occurs. If I do a search on the frontend that includes an apostrophe, there’s no issue at all 🙂

Viewing 5 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.