FURTHER - no $_POST

no more posts to this group - just an update . i'll wait reply from host Hello. Further to my $_POST woes.. with the help of A.I. we've identified a server problem, & not coding problem... 1) ive added this at the top of my script: $t=date("YmdHi"); $P="/PATHNAME/logs/POSTDATA-$t.txt"; $raw = file_get_contents('php://input'); file_put_contents("$P", $raw); im getting this as raw data:- viewaddress=909-2-2&CHANGEURL=%2Fvyb%2F&DISPLAY=ACTIONupdatestatus however NOTHING in the $_POST or $REQUEST (also in the top of the script). the text is a bit long - but explains what ive done. I'll wait a few days / week for them to reply.... Text sent to (host) helpdesk: -------------------------------------- I’m having an issue where POST form submissions are not being received by my PHP scripts — despite working fine with GET requests. The form submission is being sent to /vyb/vybfrm.php, but upon submission, the browser ends up redirected to /vyb/ and no $_POST or $_REQUEST data appears at all. There are no errors or logs generated, and php://input is also empty, indicating the POST body is never delivered to the script. **What I’ve tried so far:** 1. Renamed the script from index.php to vybfrm.php in case mod_security was blocking POSTs to index.php. 2. Made the form explicitly use: `<form action="/vyb/vybfrm.php" method="post" enctype="application/x-www-form-urlencoded" ` 3. Confirmed that GET requests work and deliver data properly. 4. Turned off .htaccess clean URL rewriting (commented out the RewriteRule). 5. Added the following to .htaccess without any error: ```apache <IfModule mod_security.c SecFilterEngine Off SecFilterScanPOST Off </IfModule ``` 6. Added diagnostic output using file_get_contents('php://input') at the start of the script to capture raw POST body, but this also returns empty when POSTs fail. **Environment Info (from phpinfo):** - PHP Version: 7.4.10 - Server: Linux walcustweb1306.int.bizland.net (Apache with CGI/FastCGI) - post_max_size: 50M - enable_post_data_reading: On **My questions for your technical team:** 1. Could there be any **mod_security** or **WAF rules** that might block POST submissions or silently redirect to the directory (/vyb/) instead of the script? 2. Has there been any recent change in your mod_security rules, WAF behavior, or PHP/Apache configuration that might cause this? 3. Are there any logs on your end that would indicate why a POST to /vyb/vybfrm.php might be dropped or redirected? 4. Is there a way to whitelist this path or script (/vyb/vybfrm.php) from POST filtering? 5. Could any internal redirect/rewrite rules override the .htaccess settings in this subdomain? I'd really appreciate if you could check whether POST requests are being blocked or redirected before they reach the script, and let me know if there’s a workaround or if this needs an internal allowlist rule. Many thanks in advance for your help! ------------------- (end text) Did further tests and extra text added onto my ticket / request:- --------------------- **Update:** I've confirmed that my PHP script is receiving raw POST data via php://input, but the $_POST and $_REQUEST superglobals are remaining completely empty. This suggests that something is interfering *after* the raw data is received but *before* PHP can parse it into superglobals. I'm now logging that raw input to verify it's being received. I've also noticed that some log files are being created in the /subdomains/animals/htdocs/vyb/logs/ directory with names like: viewaddress=909-2-2&CHANGEURL=%2Fvyb%2F&DISPLAY=ACTIONupdatestatus This looks like POST data is being treated as part of the URL or filename — possibly due to a security module or rewrite misinterpretation. Please confirm: 1. Is mod_security (or similar) active on my account or domain? 2. Have there been any recent changes to mod_security rules or server-side behavior in the past few weeks? 3. Is there a whitelist or rule adjustment that can be made to allow standard POST submissions (application/x-www-form-urlencoded) to /vyb/ or /vyb/index.php? --------------------- (end text) -- Gordon.