The "Possible Attack" Headache

Ok boonex, I am really glad to see that you are trying to make Dolphin as secure as possible. Well, you did it (claps). Unfortunately, you have disabled the ability to do some of the simplest things such as:

- Edit categories

- Add a simple HTML block (which is actually a feature in Dolphin)

- Edit email templates

- Add OpenSocial URLS

- And so many more (just search the froums)

So here is my questions/requests to you:

1) Can you give us the option to disable the feature causing this? (of course understanding the risks)

2) Can you make it where this feature DOES NOT apply to the Administrator?

3) Can you modify the security feature to not block every little thing we try to do?

Of course, out of the 3 questions above, I would prefer #2 or #3, however I would almost be willing to task a risk for #1 and just add additional precautions to  the join process, commenting, etc.

I do understand that if you have a VPS or a dedicated server, that you can always disable the mod_security feature and not have this issue. But I'm sure not everyone has this ability (at least I don't).

Any feedback or help on this would be greatly appreciated.

P.S. I am NOT downloading that modified security.inc.php file  :)

Thanks,

Chris