403 Error when logging into forum

[ziycon]

I'm randomly getting the below error when logging into my install of smc 2 rc5, any ideas what could be causing it?

I was logging in using an ssi include on the sites home page.

Error 403

We're sorry, but we could not fulfill your request for /forum/index.php?PHPSESSID=60678e296e694be90f87a6bb38463358&action=login2 on this server.

You do not have permission to access this server. Data may not be posted from offsite forms.

Your technical support key is: 5964-d221-cd36-1abb

You can use this key to fix this problem yourself.

If you are unable to fix the problem yourself, please contact the WEBMA5TER and be sure to provide the technical support key shown above.

[ziycon]

Maybe related to mod_security, I'll check this out first.

[ziycon]

I've checked with phpinfo(), mod_sec doesn't seem to be installed on my hosting.

[Aleksi "Lex" Kilpinen]

There may be a number of reasons for that, but the error message does give a small hint. It is something in the server config stopping you from posting data outside the location of the actual script if I understood that correctly. The best bet would probably be to turn to your host and ask them what caused it exactly, and if there is something you can do to fix it.

EDIT: Scratch that, I have been adviced that this is probably due to a mod, the Bad behaviour mod to be exact,
with an option to stop offsite forms from being used. You may wish to check that

[ziycon]

Gotten to the root of the prob, seems its an issue with the Bad behaviour mod and offsite forums. Thanks for the help.

[Aleksi "Lex" Kilpinen]

Glad you found the cause in the end

[butchs]

I know this is an old thread but I noticed something with MAMP and Bad Behavior for SMF mod that may interest you:

When using MAMP on my mac I was getting blocked from entering the forum when offsite forms is enabled.  Bedsides disabling offsite forms I toyed with another work around...

In "post.inc.php" search for:

Code Select Expand

$url['host'] = preg_replace('|^www\.|', '', $url['host']);
$host = preg_replace('|^www\.|', '', $package['headers_mixed']['Host']);

Replace with:

Code Select Expand

$url['host'] = preg_replace('|^www\.|', '', $url['host']);
$host = preg_replace('|^www\.|', '', $package['headers_mixed']['Host']);
if ($url['port'] === 8888) $host = str_replace('localhost:'.$url['port'], 'localhost', $host);  //  strip port number from localhost


Port 8888 is the default MAMP port.  Another possible workaround could be to force tMAMP to act like a normal server?