Upload Error:400

Hello,

I recently migrated my server to a new host(siteground), I had been using SermonSpeaker now for a few years with no issue. After the migration, When trying to upload a new audio file in the Add section (in backend) I am now receiving an "Upload Error:400" adn the upload fails.

Originally I thought it had to be a server setting of some sort. Upon investigating and working with the Siteground support, everything looks to be ok,

file size upload limit is fine
upload directory is writeable
tmp dir is writeable
I even fixed the "PHP upload temp dir issue in the PHP.ini

Thing is, I have another podcast extension (that I dont like near as much as Sermonspeaker) and it uploads .mp3's with absolutely no issue. so It isnt anything on the server configuration.

here is my joomla/server/php info

I updated SS to the latest compatible version. 4.5.4

I turned on Error Reporting, gave me nothing pertaining to uploads

I checked the PHP error log and I did find some notices:

I can usually troubleshoot this stuff on my own, but this one has me stumped, especially since the other extensions have no issue uploading .mp3s, so it is something with Sermonspeaker specifically not playing nice with my new server.

Any guidance you could give me would be great. Thank You

The errors should generate these issues, especially if you set the error reporting to "none" they should have no impact at all as PHP can deal with those sort of errors in the code (only notices and strict standards).

Error 400 indicates that the server rejected the requested as "bad request".
One could further check it using tools like Fiddler to see which request exactly triggered the error.
You may also want to try with smaller files if those work.

Just as a follow up for anyone else having this issue, I resolved it.

Add to your .htaccess file this line:
SecFilterEngine Off

Make sure you add this to the .htaccess in your "administrator" folder.

** update ***
Upon further review, essentially what this does is disable mod_security which could possibly lead to security problems depending on the sever. I have traced it down to a "malformed content" rule in the modsecurity_crs_20_protocol_violations.conf.

commenting out the rule SecRule REQBODY_PROCESSOR_ERROR is a safer way to achieve this.
unfortunately , not everyone will have access to that file and may have to ask your host to accommodate.

On another note, this is specific to Sermonspeaker with this version of mod_security. The other extension does not have this issue, so whatever mechanism/code sermonspeaker is using to upload files is creating this error.

Hopefully this information helps others.

It may be interesting what exactly the triggering rule is trying to prevent.
Obviously, we're uploading files here and there may be rules which would prevent uploading a file.

I would also be interested if this issue also exists in the latest version of SermonSpeaker.
You should update to Joomla 3 anyway

Well, Yes, I would imagine once I move to Joomla3, the issue may resolve itself, that is next step on my agenda.. as you know that is a daunting task in itself.

Im working with my host now to see if they would be so kind as to comment out that line and see if that does the trick...

just FYI here is the rule in the modsecurity_crs_20_protocol_violations.conf file

# Block request with malformed content.
# ModSecurity will not inspect these, but the server application might do so
#
SecRule REQBODY_PROCESSOR_ERROR "!@eq 0" "t:none,deny,log,auditlog,status:400,msg:'Request Body Parsing Failed. %{REQBODY_PROCESSOR_ERROR_MSG}',id:'960912',severity:'2'"

I will let you know if commenting that out actually does the trick (if they let me do it)

Thanks

Another option could be disabling the mod specifically for the upload php file itself, which would keep it intact for all other scripts. Could you tell me what php file specifically handles the upload? I may try that as well. It would be much safer I think.

for instance:

<ifmodule mod_security.c>
<files upload.php>
SecFilterEngine Off
SecFilterScanPOST Off
</files>
</ifmodule>

I looked thru the sermonspeaker files, but was not able to easily locate what .php file is handling that process.

Thanks