Page 1 of 1

403 : access forbidden

Posted: 01 Nov 2016, 23:40
by warmup031
Hello,

When a public user create a new post he's got the message 403 access forbidden (not all the time ...).
I don't understand why, I set public rights to allow creating posts.
Also I would like to know why it is forbidden from phocaguestbook, are there any logs to find out apart from the logging interface which just says
"Your are not authorized to add a new post because your ip is banned". I did not ban ip from some users, and they are forbidden.

IP Ban is disabled, all antispam functions are disabled
Is there another parameter to check ?

Thank you for your help


Olivier

Re: 403 : access forbidden

Posted: 04 Nov 2016, 14:53
by Jan
Hi, do you use some cache settings?

Jan

Re: 403 : access forbidden

Posted: 04 Nov 2016, 20:27
by warmup031
Hello Jan,

Yes I do

Re: 403 : access forbidden

Posted: 05 Nov 2016, 19:56
by Jan
And if you clear it and e.g. disable for tests, do you get the same problem?

Jan

Re: 403 : access forbidden

Posted: 06 Nov 2016, 20:30
by warmup031
Hello,

I resolved the problem ...
this was due to apache2 mod_security ...
some sentences are taken as ... sql injection (id 981173, 981243, 959073 from modsecurity_crs_41_sql_injection_attacks.conf).
These rules are known to be false positive ...

Re: 403 : access forbidden

Posted: 08 Nov 2016, 14:13
by Jan
Ok