apostrophe breaking validation

Hey Ray

Have got a server validation

$WAFV_Errors .= WAValidateAN(((isset($_FILES["EventImage"]))?$_FILES["EventImage"]["name"]:"") . "",true,true,true,false,"-_.",false,2);

It works fine until you have a filename with ' in it somewhere and then it shows an internal server error (http://prntscr.com/om334m) rather than going back to the update page and showing the validation error message.

Have attached a page, but this is happening on all inserts and update pages

It probably isn't breaking the validation... it is probably breaking the file upload. Windows doesn't allow files to have quotes in them, so I can't even create one to test with until I get back to my MAC.

I'd maybe use regular expression validation instead and only allow numbers, letters, and the period for the extension. I think the issue is that alphanumeric validation is for validation on sentences or paragraphs and it allows things like single quotes which shouldn't be in file names.

ok thanks for that Ray and certainly interesting.

I have tried setting the validation up this way

$WAFV_Errors .= WAValidateRX(((isset($_FILES["EventImage"]))? preg_replace('/.[^.]*$/', '', $_FILES["EventImage"]["name"]) :"") . "","^[a-zA-Z0-9_.-]+$",true,2);

to only allow alphanumeric, underscore, hyphen and period and still getting the internal server error http://prntscr.com/onmb1e - if I rename the file to have spaces but no apostrophe then the validation works fine

Can I get FTP access and steps to reproduce... maybe even attach the file you are uploading so I can test with that.

sure, see PM

The FTP information I have doesn't seem to work. Please attach an updated site definition so I can test the issue and I'll get it sorted.

as per chat last night, this is a mod_security rule and is unchangeable.

Thanks for helping :)