Method Not Implemented
January 30th 2009
A few days ago when i wanted to post an article, wordpress denied to post my article instead give me a message like this :
Method Not Implemented
POST to /wp-admin/post.php not supported.
Crawling in google, i found this post. He said that there’s an “Injection Attack” in his Apache log. How can i forget to see what’s in my log right then… And it’s true… It’s says :
Pattern match "../etc/(?:passwd|shadow)" at ARGS:content.
in my log from ModSec because it think that the sentence i wrote :
# grep root /etc/ passwd (without space between / dan passwd)
was a trial for an injection…. So, i add a space between / and passwd, and voila… it posted… Such an unbelievable security from ModSec hihihihihihi…..
Moral of the story : don’t ever forget about log file… 
Hope this short post can help you if you experience same problem..
