I'm on shared hosting. Because of security concerns on their part
, every time the text "curl u" is inputted, a 403 forbidden is
given and the form is not submitted. This is of course a problem as
I'm doing work for a children's literacy program, and plenty of
people try to input "curl up with a book".
I'm trying to use 'str_replace' to solve this issue, but I can't seem
to get around the 403 error.
It appears as if the hosting service doesn't give me a chance to
replace "curl u" with something else prior to them blocking the
I can tell my str_replace is working as if I change the searched text
to something other than "curl u" it does in fact replace it and
submit it correctly.
Anyone have any ideas for a workaround? My next thought is to use
Thanks for listening. Below is the PHP .
// Grabbing the data from the form.
if ($task == "updateInfo")
$activityChallenges = cs_remove_curl_up(sanitize_paranoid_string
// change "curl u" to "EDIT kurl u"
function cs_remove_curl_up($string, $min='', $max='')
$string = str_replace("curl u", "EDIT kurl u", $string);
$len = strlen($string);
if((($min != '') && ($len < $min)) || (($max != '') && ($len >
My host told me this:
"Mod_security is restricting this and blocks all url's with C-url.
This is done because of some php worms that are spread using c-url. I
would recommend trying to work around this. It will be a major
security issue for us to allow this."