Hello,
When a public user create a new post he's got the message 403 access forbidden (not all the time ...).
I don't understand why, I set public rights to allow creating posts.
Also I would like to know why it is forbidden from phocaguestbook, are there any logs to find out apart from the logging interface which just says
"Your are not authorized to add a new post because your ip is banned". I did not ban ip from some users, and they are forbidden.
IP Ban is disabled, all antispam functions are disabled
Is there another parameter to check ?
Thank you for your help
Olivier
403 : access forbidden
- Jan
- Phoca Hero
- Posts: 48402
- Joined: 10 Nov 2007, 18:23
- Location: Czech Republic
- Contact:
Re: 403 : access forbidden
Hi, do you use some cache settings?
Jan
Jan
If you find Phoca extensions useful, please support the project
-
- Phoca Member
- Posts: 16
- Joined: 13 Oct 2016, 09:23
Re: 403 : access forbidden
Hello Jan,
Yes I do
Yes I do
- Jan
- Phoca Hero
- Posts: 48402
- Joined: 10 Nov 2007, 18:23
- Location: Czech Republic
- Contact:
Re: 403 : access forbidden
And if you clear it and e.g. disable for tests, do you get the same problem?
Jan
Jan
If you find Phoca extensions useful, please support the project
-
- Phoca Member
- Posts: 16
- Joined: 13 Oct 2016, 09:23
Re: 403 : access forbidden
Hello,
I resolved the problem ...
this was due to apache2 mod_security ...
some sentences are taken as ... sql injection (id 981173, 981243, 959073 from modsecurity_crs_41_sql_injection_attacks.conf).
These rules are known to be false positive ...
I resolved the problem ...
this was due to apache2 mod_security ...
some sentences are taken as ... sql injection (id 981173, 981243, 959073 from modsecurity_crs_41_sql_injection_attacks.conf).
These rules are known to be false positive ...
- Jan
- Phoca Hero
- Posts: 48402
- Joined: 10 Nov 2007, 18:23
- Location: Czech Republic
- Contact: