URL with underscore error

[mhiizadi]

Hello , we have directadmin server afew months ago , URLs with underscore open easily , but in the new install yesterday , we get error :

Bad Request

Your browser sent a request that this server could not understand.
Additionally, a 400 Bad Request error was encountered while trying to use an ErrorDocument to handle the request.

is there any idea on this issue to i can solve it ?
thanks for every answer ...
hossein.

 

[zEitEr]

Hello,

What URL fails? Do you have modsecurity enabled? If yes, try and disable modsecurity and see whether or not it helps.

 

[mhiizadi]

Hi , it's seems mod_security is disabled :

in options.conf i see :

modsecurity_uploadscan=no
litespeed_serialno=trial
modsecurity=no
modsecurity_ruleset=comodo


URL: http://picture_notes.najiblog.com/upload/picture/fgh/40060.jpg

Thanks for your answer .

 

[zEitEr]

That does not necessary mean that modsecurity is not enabled. You should check output from apachectl. The URL https://www.directadmin.com/hello_world.txt drops 404 error, not 400. And check what you have in ErrorDocument.

From RFC 1738 specification:

Thus, only alphanumerics, the special characters "$-_.+!*'(),", and reserved characters used for their reserved purposes may be used unencoded within a URL.

​

Hardly can we help you without more details.

 

[jwillberg]

Have you check apache / domain error.log what it says ?