Error 406 - Access error

When I want to save an new custom object, I get an access error 406 returned from the server.
In another post it was established that mod_security would be responsible for that error.
On my test machine without mod_security everything works fine.

I have asked my provider to give me log information of my tests and you find that below.

Rgrds, Pieter

"Access denied with code 406 (phase 2). Pattern match "(?:\\b(??(?:elect\\b(?:.{1,100}?\\b(??:length|count|top)\\b.{1,100}?\\bfrom|from\\b.{1,100}?\\bwhere)|.*?\\b(?:d(?:ump\\b.*\\bfrom|ata_type)|(?:to_(?:numbe|cha)|inst)r))|p_(??:addextendedpro|sqlexe)c|(?:oacreat|prepar)e|execute(?:sql)?|makewebt ..." at ARGS:Itemid. [file "/usr/local/apache/conf/modsec2.user.conf"] [line "88"] [id "950001"] [msg "SQL Injection Attack"] [data "select 1 from(select count(*),concat((select username from jos_users where"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQL_INJECTION"]"

Alex,

Herewith the requested info:

The security module is: ModSecurity 2.x

The actions I do on Open Graph are:
- Open up the Open graph screen in the backend.
- Click on Objects
- Click on New
- Select in the objecr window the "Custom Object Type"
Filled in the parameters as in attached screenshot (fname=JFBC_screenshot.jpg)
In case the screenshot is not very clear, the used params are:

Changed Name to "Joomblog"
object type: news.reads
Url Query parameter: option=com.joomblog view=blogger

The rest of the params as per default.

Rgrds, Pieter