No Code Attached Yet
avatar BrunoBaz1lle
BrunoBaz1lle
21 Nov 2025

Hello,
My hosting provider is PlanetHoster.

I'm having a problem with my website, and to highlight the issue, I installed a "fresh" Joomla site.

I'm in the back office, logged in as superuser:

  • I create/edit an article with underlined text: no error
  • I create/edit a contact with underlined text in the additional information: no error

I'm on the front office, logged in as a "Manager":

  • I create/edit an article with underlined text: no error
  • I create/edit a contact with underlined text in the additional information: Error
    Clearly, the error is caused by a PlanetHoster firewall rule. If I disable it, I no longer get the error...
    Apparently, the HTML "style" attribute, introduced because I'm underlining text, is triggering the firewall rule, which sees it as a possible code injection.

We can all agree, the rule is flawed.

I tested it on OVH, no errors.

I did, of course, ask PlanetHoster... no response, other than "contact Joomla" :)

But my question is:
Why does mod_content (article) work in the front office but not in the back office, while mon_contact doesn't?
This suggests that the two components handle data entry differently. That mod_content doesn't trigger the rule, while mod_contact does.

Can anyone provide a reason for this asymmetrical behavior?

I can provide access to my test environment.

avatar BrunoBaz1lle BrunoBaz1lle - open - 21 Nov 2025
avatar BrunoBaz1lle BrunoBaz1lle - change - 21 Nov 2025
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 21 Nov 2025
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 21 Nov 2025
avatar BrunoBaz1lle
BrunoBaz1lle - comment - 24 Nov 2025

Fix : please read com_content and com_contact instead of mod_content and mod_contact (resp.)
Aplogize for the mistake


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46482.

Add a Comment

Login with GitHub to post a comment