As far as I have seen so far, there is no mention anywhere that mod_security must now be disabled to even install V4...is there any way to bypass this? I am yet to find any benefit of disabling mod_security.
Update, so far, so good with this hack in place. Haven't noticed any adverse effects yet.
To install V4 with mod_security enabled:
/install/app/Installer/SetupController.php - comment out the mod_secure check/** * 'mod_secure' => $validator->isModeSecurityDisabled(), */
/install/app/Installer/Validator.php - comment out the mod_secure check validation/** * public function isModeSecurityDisabled() * { * $checking_result = true; * * ob_start(); * phpinfo(INFO_MODULES); * $_info = ob_get_contents(); * ob_end_clean(); * * if (strpos($_info, 'mod_security') !== false) { * App::instance()->setNotification('E', App::instance()->t('error'), App::instance()->t('text_mod_security'), true, 'validator'); * $checking_result = false; * } * * return $checking_result; * } */
All I did was change return $checking_result; to return true;