Sort of an odd one. I was running into 501 errors trying to save a blog entry. I ended up trying to save it sentence by sentence and then character by character to figure out exactly what was causing the problem. Anyway, here's the post in question:
http://gohanman.com/cms/node/619

If I edit the node and change "/etc/shado" to "/etc/shadow" (in the body field) and hit the save button, I get this:
Method Not Implemented

POST to /cms/node/619/edit not supported.

Maybe there's an explanation and this is somehow expected behavior, but it took me by surprise. The idea that Drupal might be trying to mess around with the local machine's password file makes me a bit nervous though.

Comments

damien tournoud’s picture

damien tournoud commented
Category: bug » support
Status: Active » Postponed (maintainer needs more info)

I suppose you have mod_security on this server, and that it is misbehaving (again).

gohanman’s picture

gohanman commented

Sounds possible. Shared hosting, unfortunately, so I can't do much about it.
EDIT: any easy way to check without having access to httpd.conf?

mdupont’s picture

mdupont
Primary language French
Location Switzerland
commented
Status: Postponed (maintainer needs more info) » Closed (works as designed)

You can try dropping a file with phpinfo(); in it, but it may also be filtered.

Anyway, you have something somewhere that is monitoring POST requests and prevents the ones it considers harmful. /etc/shadow being a critical system file on UNIX servers it then rejects any request with this filename in it, in case it is an attack attempt. There is not much you can do there from the Drupal side.