No Code Attached Yet
avatar BrunoBaz1lle
BrunoBaz1lle
21 Nov 2025

Hello,
My hosting provider is PlanetHoster.

I'm having a problem with my website, and to highlight the issue, I installed a "fresh" Joomla site.

I'm in the back office, logged in as superuser:

  • I create/edit an article with underlined text: no error
  • I create/edit a contact with underlined text in the additional information: no error

I'm on the front office, logged in as a "Manager":

  • I create/edit an article with underlined text: no error
  • I create/edit a contact with underlined text in the additional information: Error
    Clearly, the error is caused by a PlanetHoster firewall rule. If I disable it, I no longer get the error...
    Apparently, the HTML "style" attribute, introduced because I'm underlining text, is triggering the firewall rule, which sees it as a possible code injection.

We can all agree, the rule is flawed.

I tested it on OVH, no errors.

I did, of course, ask PlanetHoster... no response, other than "contact Joomla" :)

But my question is:
Why does mod_content (article) work in the front office but not in the back office, while mon_contact doesn't?
This suggests that the two components handle data entry differently. That mod_content doesn't trigger the rule, while mod_contact does.

Can anyone provide a reason for this asymmetrical behavior?

I can provide access to my test environment.

avatar BrunoBaz1lle BrunoBaz1lle - open - 21 Nov 2025
avatar BrunoBaz1lle BrunoBaz1lle - change - 21 Nov 2025
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 21 Nov 2025
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 21 Nov 2025
avatar BrunoBaz1lle
BrunoBaz1lle - comment - 24 Nov 2025

Fix : please read com_content and com_contact instead of mod_content and mod_contact (resp.)
Aplogize for the mistake


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46482.

avatar MacJoom
MacJoom - comment - 6 Dec 2025

Thank you for your contribution - it seems that OVH has no or different firewall rules than Planethoster. I fear there is nothing that can be done from Joomla!
Just to make some terms clear: by "front office" you mean frontend and by "back office" you mean "backend" - right?
Since i don't know the exact firewall rule i can't tell you what makes the difference.
I will close this issue - if you feel this must be keept please comment.

avatar MacJoom MacJoom - change - 6 Dec 2025
Status New Closed
Closed_Date 0000-00-00 00:00:00 2025-12-06 12:14:34
Closed_By MacJoom
avatar MacJoom MacJoom - close - 6 Dec 2025
avatar CpRandos
CpRandos - comment - 6 Dec 2025

Hi Thank you for your reply.

Apologize for my english, you are right :
front-office = frontend
back-office = backend

The aim of my post was to understand why the same action in backend and not in frontend do not "trig" the firewall rule, and why 2 native components using the same plugin to edit text, one "trig" the firewall rule the other not.

I didn't be able no show the firewall rule.

And I'm convince the PlanetHoster hosting environment is guilty, the guys from PlanetHoster told me they develop themself their rules.

You can close this issue, I disable the firewall rules, so for me all works now.

Cheers !

Add a Comment

Login with GitHub to post a comment