Loading...
 
Skip to main content

Architecture / Installation

Forum List Topic List

 
Thread actions
Print this page
  • Print all pages

    • Tiki 27.1 ERROR - Your attempt was blocked as a suspected malicious operation

    Posted by Kharisma Aditya

    hi All,

    last thursday i suddenly got this Tiki error every time user try to login.

    Image

    we have not change any tiki wiki configuration for months. it is just suddenly break like that upon user login.

    on my server log, we got warning:

    Mon Jan 19 10:29:08.595526 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr:
    Mon Jan 19 10:29:08.595578 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: **** Start CSRF error fromwww.ptadu.com *****
    Mon Jan 19 10:29:08.595585 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: The HTTP_ORIGIN host () does not match this server (www.ptadu.com).
    Mon Jan 19 10:29:08.595590 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: site_security_timeoutpreference:14400seconds(240 minutes)
    Mon Jan 19 10:29:08.595596 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: SCRIPT_NAME: /TEST/wiki/tiki-login.php
    Mon Jan 19 10:29:08.595600 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: REQUEST_URI: /TEST/wiki/tiki-login.php
    Mon Jan 19 10:29:08.595604 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: HTTP_ORIGIN: null
    Mon Jan 19 10:29:08.595607 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: REQUEST_METHOD: POST
    Mon Jan 19 10:29:08.595610 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: $_GET: empty
    Mon Jan 19 10:29:08.595612 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: $_POST: {
    Mon Jan 19 10:29:08.595615 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "ticket": "4WppO7-jJBRJmJIGuMYS38J7y7oQJIXqhE5mBHePSLs",
    Mon Jan 19 10:29:08.595618 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "user": "spg001",
    Mon Jan 19 10:29:08.595621 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "pass": "spg001",
    Mon Jan 19 10:29:08.595624 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "login": "",
    Mon Jan 19 10:29:08.595627 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "stay_in_ssl_mode_present": "y",
    Mon Jan 19 10:29:08.595652 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: "stay_in_ssl_mode": "y"
    Mon Jan 19 10:29:08.595658 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: }
    Mon Jan 19 10:29:08.595663 2026 fcgid:warn pid 3999456:tid 140412964943616 client 59.153.129.136:0 mod_fcgid: stderr: **** End CSRF error fromwww.ptadu.com *****

    is there any solution regarding this?

    Reads: 11032