SP Page Builder 6.2.3 – Saving Pages Fails With 404 Under ModSecurity (PCRE Limits Exceeded) - Question | JoomShaper

SP Page Builder 6.2.3 – Saving Pages Fails With 404 Under ModSecurity (PCRE Limits Exceeded)

KQ

Ken Quigley

SP Page Builder 2 weeks ago

Hello JoomShaper Support Team,

We need urgent technical assistance regarding a critical issue introduced after updating to SP Page Builder 6.2.3, which is now blocking page saves across multiple sites.

This is not an isolated case and appears to affect any site updated to 6.2.3 running under ModSecurity.

After updating to SP Page Builder 6.2.3, we began experiencing a critical and reproducible failure when saving pages in the Joomla administrator. The issue affects multiple independent websites hosted on different domains, all running standard Apache + ModSecurity configurations.

The problem does not appear to be related to server misconfiguration, PHP limits, or corrupted installation. Instead, evidence from Apache and ModSecurity logs indicates that the save request payload generated by SP Page Builder exceeds PCRE limits, triggering security interception during the save process. This results in a 404 response instead of a successful page save.

The issue is fully reproducible: pages save normally while empty, but fail immediately once any SP Page Builder component is added. This strongly suggests a structural change in how JSON payloads are being generated or transmitted in version 6.2.3.

Environment

Development site: dev5.keystroke.ca Project: Balancing Whispers Joomla: 4.x Template framework: Helix Ultimate 2.2.4 Template: Atum 1.0 SP Page Builder: 6.2.3 Server: Apache + ModSecurity (Imunify360)

Problem Summary

After updating to SP Page Builder 6.2.3, we started receiving the following error when saving pages:

“Request failed with status code 404”

Key symptoms: • Saving existing pages fails with a 404 error • Newly created pages save only while empty • As soon as any component is added, saving fails • The issue is consistent and fully reproducible

Timeline / Reproduction

The issue first appeared on:

Page ID 11 – “Our Facilities” https://dev5.keystroke.ca/our-facilities

(No custom components used.)

Shortly after, all pages on the site failed to save.

We updated another site (handheldcontact.com), and the same issue appeared immediately, confirming the problem is not site-specific.

After applying ModSecurity rule exceptions at the WHM level: • Homepage (Page ID 10) can now save • All other existing pages still fail • New pages fail as soon as any component is added

This confirms the workaround is partial and unstable.

Server Log Evidence

Apache error logs show ModSecurity blocking the save request due to PCRE limits:

ModSecurity: Execution error - PCRE limits exceeded (-47) [file “/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/013_i360_generic.conf”] [uri “/administrator/index.php”] Action: Intercepted (phase 2) Producer: ModSecurity for Apache / OWASP CRS 3.0.2

This indicates SP Page Builder is sending large JSON payloads during save operations that trigger ModSecurity false positives.

What We Already Tried (No Success) • Increased post_max_size and upload limits • Cleared Joomla cache and browser cache • Enabled and disabled URL rewriting • Confirmed the issue is browser-independent • Fully uninstalled and reinstalled SP Page Builder • Rolled back to a previous SPPB version • Installed SPPB on a separate domain (same issue occurred)

We also reviewed known forum threads:

30117 – Uninstall/reinstall workaround 42627 – “Request too large displaying 404 instead of 413”

Despite reinstalling and rolling back, the issue persists.

Business Impact • All our company websites use SP Page Builder • Most of our clients’ websites use SP Page Builder • The issue appears immediately after updating to 6.2.3 • It is not realistically solvable on standard hosting environments

This creates serious operational risk.

What We Need

We urgently need: • Confirmation whether this is a known issue in 6.2.3 • A permanent fix or official mitigation • Technical guidance on preventing large JSON save requests from triggering ModSecurity • A response from the support or development team

Supporting evidence: https://www.dropbox.com/….

Given the severity and scale of this issue, we would appreciate a prompt and direct response.

Kind regards, Carlos

0
8 Answers
Ofi Khan
Ofi Khan
Accepted Answer
Support Agent 2 weeks ago #217792

Hello Ken Quigley,

Thank you for reaching out to our technical support forum. I’m sorry to hear about the trouble you’re experiencing. Rest assured, I will look into this issue for you and work to resolve it as quickly as possible.

Unfortunately, I cannot access the site. Could you please check that if Bangladesh (country) is blocked?

prnt.sc/b_S-gzhxkpAO

Best regards

0
KQ
Ken Quigley
Accepted Answer
2 weeks ago #217801

Hello Ofi, Thank you for your reply.

You should now be able to access the site. We have checked and confirmed that Bangladesh was previously blocked at the server level, but it has now been unblocked.

Could you please try accessing it again and let us know if you are able to log in successfully?

If you still experience any difficulty, please tell us the IP address you are connecting from so we can whitelist it.

We appreciate your help and look forward to your findings.

Best regards, Carlos

0
Ofi Khan
Ofi Khan
Accepted Answer
Support Agent 1 week ago #218429

You are welcome 😊

I have checked the site on your server and on my localhost. On localhost, this issue does not arrive. My initial observation is the issue might be happening on your server side. Can you please check it with your hosting provider? Also, update SP Page Builder version and check the issue again.

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 1 week ago #218430

Hi Ken,

about ModSecurity - your hosting provider should be able to add exceptions. That should help you to keep it enabled and be able to use all basic features (Save, etc).

0
SO
Stuart Oh
Accepted Answer
3 days ago #218595

Hi Ken, could you clarify if you were able to resolve this issue please? I am facing exactly the same issue, but despite my web host adding exceptions to relevant ModSecurity rules, the JSON save function problem of the extension persists. The most common support solution appears to be to disable mod_security, which is an acceptable step to have to take with shared hosting.

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 3 days ago #218597

I don't know the technical details, becuase I don't work in Hosting Support. They should be able disable it for a specific URL (e.g., your admin panel)

just share links to them, for example,

/administrator/index.php?option=com_sppagebuilder&view=editor&tmpl=component

/index.php?option=com_sppagebuilder&view=form

It should be a good start to check if that will help.

0
SO
Stuart Oh
Accepted Answer
3 days ago #218598

Hi Paul

I was able to share links like that with the web host and they have implemented exceptions to mod_security, which resolved the issue on some pages, but not others. At this point I was able to establish that the pages that still don't save have a Raw HTML add-on in them, but was able to find a temporary workaround by loading the Raw HTML as a Joomla module add-on instead of a Raw HTML add-on.

I felt I should share the temporary workaround I'm using in case anyone else reads this thread whilst searching the forum for the same issue.

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 3 days ago #218600

It also depends what code you used in Raw HTML addon. It was typical HTML, Iframe or something else?

0