Malformed Host Header when saving new template

this is for andreas3

pasted the .html, gave it a name, folder in assets/templates

got this:

Bad Request
Your browser sent a request that this server could not understand.

Client sent malformed Host header

used back button and tried to save again it locks up

any ideas?

thanks

saving chunks works ok but saving snippets I get:

Not Implemented
The page you are looking for cannot be displayed because a header value in the request does not match certain configuration settings on the Web server.

plugins same thing

using 0.9.6.1p2

Here is the log for saving templates:

[Fri Aug 01 10:44:54 2008] [error] [client 70.176.108.250] ModSecurity: Warning. Pattern match "(?:\\\\b(?:(?:type\\\\b\\\\W*?\\\\b(?:text\\\\b\\\\W*?\\\\b(?:j(?:ava)?|ecma|vb)|application\\\\b\\\\W*?\\\\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)folder)\\\\b|on(?:(?:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)|key(?:press|down|up)|c(?: ..." at ARGS:post. [id "950004"] [msg "Cross-site Scripting (XSS) Attack. Matched signature <<meta>"] [severity "CRITICAL"] [hostname "xxxxxxx.com"] [uri "/manager/index.php"] [unique_id "jCaXuULw7n8AAGUSbqQAAAAJ"]
[Fri Aug 01 10:44:54 2008] [error] [client 70.176.108.250] ModSecurity: Access denied with code 400 (phase 2). Pattern match "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at ARGS:post. [id "950911"] [msg "HTTP Response Splitting Attack. Matched signature <<html>"] [severity "ALERT"] [hostname "xxxxxxx.com"] [uri "/manager/index.php"] [unique_id "jCaXuULw7n8AAGUSbqQAAAAJ"]

I’ve run into problems with mod_security before :’(

get close to the same with, for instance, saving a snippet:

[Fri Aug 01 10:51:43 2008] [error] [client 70.176.108.250] ModSecurity: Warning. Pattern match "(?:\\\\b(?:(?:type\\\\b\\\\W*?\\\\b(?:text\\\\b\\\\W*?\\\\b(?:j(?:ava)?|ecma|vb)|application\\\\b\\\\W*?\\\\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)folder)\\\\b|on(?:(?:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)|key(?:press|down|up)|c(?: ..." at ARGS:post. [id "950004"] [msg "Cross-site Scripting (XSS) Attack. Matched signature <<script>"] [severity "CRITICAL"] [hostname "xxxxxx.com"] [uri "/manager/index.php"] [unique_id "pIMoeULw7n8AAD-fVogAAAAG"]
[Fri Aug 01 10:51:43 2008] [error] [client 70.176.108.250] ModSecurity: Access denied with code 501 (phase 2). Pattern match "(?:(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open)|\\\\$_(?:(?:pos|ge)t|session))\\\\b|<\\\\?(?!xml))" at ARGS:post. [id "950013"] [msg "PHP Injection Attack. Matched signature <<?>"] [severity "CRITICAL"] [hostname "xxxxxxx.com"] [uri "/manager/index.php"] [unique_id "pIMoeULw7n8AAD-fVogAAAAG"]

http://wiki.modxcms.com/index.php/What_is_mod_security_and_how_does_it_affect_me

great, thanks