Roster won't save to database...

by **Jabouty** » Sun May 04, 2008 2:11 pm

This is driving me insane...

[WoWRoster v1.9.9.1758]

Everything installed nicely, and I can upload and play with some areas, but for the life of me I cannot get anything to save to the database if it's under the "Configure Main Roster" area...

Everything else saves the data just fine, but anything below "Configure Main Roster" acts like it's saving, and then BAM! All the defaults are reverted back...

halp?

by **Jabouty** » Sun May 04, 2008 3:00 pm

This is a fresh install, sorry about the leaving out of that information.

by **zanix** » Mon May 05, 2008 1:35 am

After changing some settings and hitting the "Save Settings" button

Look near the top and see if "Settings have been changed" is displayed and look for soemthing like this in the SQL window

lib/config.lib.php
509 0.0009 UPDATE `roster_config` SET `config_value` = 'SOMEVALUE' WHERE (1) AND `config_name` = 'SOMENAME';

by **Jabouty** » Mon May 05, 2008 1:22 pm

zanix wrote:After changing some settings and hitting the "Save Settings" button

Look near the top and see if "Settings have been changed" is displayed and look for soemthing like this in the SQL window

lib/config.lib.php
509 0.0009 UPDATE `roster_config` SET `config_value` = 'SOMEVALUE' WHERE (1) AND `config_name` = 'SOMENAME';

I do not get the settings have been saved at the top of the screen, nor do I get the SQL.

Line Time Query
lib/roster.php
142 0.0012 SELECT `config_name`, `config_value` FROM `roster_config` ORDER BY `id` ASC;
488 0.0004 SELECT * FROM `roster_addon` ORDER BY `basename`;
488 0.0003 SELECT * FROM `roster_addon` ORDER BY `basename`;
lib/login.php
77 0.0003 SELECT * FROM `roster_account` ORDER BY `account_id` DESC;
196 0.0002 SELECT `account_id`, `name` FROM `roster_account`;
lib/config.lib.php
535 0.0009 SELECT * FROM `roster_config` WHERE (1) ORDER BY `id` ASC;
admin/roster_config_functions.php
68 0.001 SELECT `mb`.*, `a`.`basename`
FROM `roster_menu_button` AS mb
LEFT JOIN `roster_addon` AS a
ON `mb`.`addon_id` = `a`.`addon_id`
WHERE `scope` IN ('util','realm','guild')
ORDER BY `mb`.`title`;
lib/functions.lib.php
1021 0.0004 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '5' ORDER BY `id` ASC;
1021 0.0004 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '6' ORDER BY `id` ASC;
1021 0.0004 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '7' ORDER BY `id` ASC;
1021 0.0004 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '4' ORDER BY `id` ASC;
1021 0.0008 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '3' ORDER BY `id` ASC;
1021 0.0003 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '2' ORDER BY `id` ASC;
1021 0.0003 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '8' ORDER BY `id` ASC;
1021 0.0003 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '9' ORDER BY `id` ASC;
1021 0.0003 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '10' ORDER BY `id` ASC;
1021 0.0004 SELECT `config_name`, `config_value` FROM `roster_addon_config` WHERE `addon_id` = '1' ORDER BY `id` ASC;
lib/menu.php
414 0.0016 SELECT count(`member_id`) AS `amount`, IF(`note` LIKE '%alt%',1,0) AS 'isalt', FLOOR(`level`/10) AS label FROM `roster_members` WHERE `level` >= 30 GROUP BY isalt, label;
532 0.0003 SELECT `name`, `server`, `region` FROM `roster_upload` WHERE `default` = '1' LIMIT 1;
608 0.0005 SELECT `mb`.*, `a`.`basename` FROM `roster_menu_button` AS mb LEFT JOIN `roster_addon` AS a ON `mb`.`addon_id` = `a`.`addon_id` WHERE `a`.`addon_id` IS NULL OR `a`.`active` = 1;
625 0.0004 SELECT * FROM `roster_menu` WHERE `section` IN ('util','realm','guild') ORDER BY `config_id`;

by **Jabouty** » Mon May 05, 2008 1:23 pm

oh cripes. I think I know the problem. Clarify one thing for me:

the main rostercp admin page is sending a total of how many variables back to the server?

by **zanix** » Mon May 05, 2008 1:44 pm

Around 80 +- 5 or so

by **Jabouty** » Mon May 05, 2008 6:30 pm

zanix wrote:Around 80 +- 5 or so

That's what I thought.

The problem is Suhosin. I'm currently arguing with my host about that damned piece of software. I'm not convinced that blocking the PHP software from variables is an acceptable form of security. There is a fine line between security and usability (my father would say the fine line lies between security and paranoia...) and Suhosin enables hosts to cross that line regularly.

Suhosin is blocking the variables from being passed because they are over the limit. That said, I apologize for wasting your time with this issue as it is clearly my host's issue. I'll handle it from there with her.

Thank you for your quick responses though!

Jabouy

by **Jabouty** » Mon May 05, 2008 10:45 pm

After some further delving, it's actually Mod_security that is flubbing this iteration.

Put:
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

in the .htaccess file and everything is working as expected again.

by **zanix** » Tue May 06, 2008 12:45 am

It is good to post here about these issues so others with the same problem can see the reasons and/or possible solutions