The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

phpMyAdmin Delete Queries won't execute - "Access Denied: Security Token Failure"

Discussion in 'Security' started by mikelegg, Aug 8, 2011.

  1. mikelegg

    mikelegg Well-Known Member

    Joined:
    Mar 29, 2005
    Messages:
    330
    Likes Received:
    0
    Trophy Points:
    16
    Ever since the latest phpMyAdmin update (with the new pretty look) I can't execute DELETE queries via it.

    I get an "Access Denied: Security Token Failure" error whichs asks me to enter my cPanel login details again.
    When I re-enter my login details I get a 404 error.

    I've tried Firefox 5.0 and IE 9.0.1 with the same results.
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,447
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  3. mikelegg

    mikelegg Well-Known Member

    Joined:
    Mar 29, 2005
    Messages:
    330
    Likes Received:
    0
    Trophy Points:
    16
    Done - Ticket ID 1798149
     
  4. mikelegg

    mikelegg Well-Known Member

    Joined:
    Mar 29, 2005
    Messages:
    330
    Likes Received:
    0
    Trophy Points:
    16
    Gary from cPanel identified the problem in 5 minutes - Mod Security.

    ModSecurity: Access denied with code 406 (phase 2). Pattern match "((alter|create|drop)[[:space:]]+(column|database|procedure|table)|delete[[:space:]]+from|update.+set.+=)" at ARGS:sql_query. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "354"] [id "300015"] [rev "1"] [msg "Generic SQL injection protection"] [severity "CRITICAL"] [hostname "domain.tld"] [uri "/cpsess940558260/3rdparty/phpMyAdmin/sql.php"] [unique_id "TkG-QXZYGEEAAGoBG4IAAAAA"]

    There is an open bug report about mod security coming into contact with the apache backend on cPanel ports, causing issues like this.
     
  5. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,447
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  6. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Re: phpMyAdmin Delete Queries won't execute - "Access Denied: Security Toke

    This is resolved in version 11.31.1.2 and later - check Downloads - cPanel Inc. to see if this version has propagated to your update tier yet.
     
Loading...

Share This Page