So I recently just clicked on the modify button for the General Discussion category.
Unfortunately, it came up with a "406 Not Acceptable" error, and said this:
Not Acceptable
An appropriate representation of the requested resource /index.php could not be found on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
--------------
Is there anything I did wrong? I checked the File Manager on GoDaddy and set all, and I literally mean all the files to 777 permissions.
I don't know what's wrong. I have the Linux hosting plan.
Please help ASAP?
Some hints > http://www.simplemachines.org/community/index.php?topic=514962.0 > http://www.simplemachines.org/community/index.php?topic=514962.msg3669794#msg3669794
Quote from: a10 on February 16, 2014, 03:51:59 PM
Some hints > http://www.simplemachines.org/community/index.php?topic=514962.0 > http://www.simplemachines.org/community/index.php?topic=514962.msg3669794#msg3669794
Still trying some solutions, but so far nothing.
I wiped the whole root directory and by accident completely destroyed the whole forum.
I'm going to upload the installation again.
But is there a specific directory it should be installed to?
I installed it to public_html originally. Is that the right one?
Did you read the link a10 gave you?
There are some issues with GoDaddy and new SMF installations, involving mod_security. After you install the 2.0.6 version you will need to contact GoDaddy and ensure they have disabled mod_security for your site.
Public_html is the correct directory. Download a fresh 2.0.6 package from SMF, unzip it on your harddrive and upload the unzipped contents to the public_html directory.
Do not use 2.0.7 unless you know that GoDaddy has PHP 5.5 on your server.
Quote from: Lou69 on February 16, 2014, 04:11:40 PM
Did you read the link a10 gave you?
There are some issues with GoDaddy and new SMF installations, involving mod_security. After you install the 2.0.6 version you will need to contact GoDaddy and ensure they have disabled mod_security for your site.
Public_html is the correct directory. Download a fresh 2.0.6 package from SMF, unzip it on your harddrive and upload the unzipped contents to the public_html directory.
Do not use 2.0.7 unless you know that GoDaddy has PHP 5.5 on your server.
Just noticed the version of the theme I had installed said 2.0.2, could that be a problem?
no.
The problem as you have already been told TWICE, is that your host has mod_security improperly configured, which screws up your forum.
You have to talk to your host.
Quote from: Kindred on February 16, 2014, 06:35:53 PM
no.
The problem as you have already been told TWICE, is that your host has mod_security improperly configured, which screws up your forum.
You have to talk to your host.
What I heard from other people is that sometimes they decline it though.
Any other ideas, "SIR"?
there is no reason that they should decline -- and there is no other resolution
Quote from: Kindred on February 16, 2014, 10:24:42 PM
there is no reason that they should decline -- and there is no other resolution
Can you please next time not act like I'm dumb? I may be 16, but I know a hell a lot of stuff.
Unfortunately, I know the wrong stuff. (ie: hacking)
Quote from: k1ngqu33n on February 16, 2014, 09:51:32 PM
Quote from: Kindred on February 16, 2014, 06:35:53 PM
no.
The problem as you have already been told TWICE, is that your host has mod_security improperly configured, which screws up your forum.
You have to talk to your host.
What I heard from other people is that sometimes they decline it though.
Any other ideas, "SIR"?
Well ... no. Usually they do not decline. But, you will likely need to push the matter with them and may well need to ask them to go to the next level of support. Their tier 1 support are the same folks that always tell you to reboot your PC. Not always a great level of detailed knowledged. Most customer support sites are set up that way.
You really will not be able to resolve this until you have resolved the GoDaddy / mod_security issue. Until that is done any other effort will be like flailing at the wind.
how did I act like you are dumb?
I don't know your age... and don't care (heck, we've had younger folks on the team)
I answered your question, same as I do everyone else.
Quote from: k1ngqu33n on February 16, 2014, 10:26:57 PM
Quote from: Kindred on February 16, 2014, 10:24:42 PM
there is no reason that they should decline -- and there is no other resolution
Can you please next time not act like I'm dumb? I may be 16, but I know a hell a lot of stuff.
Unfortunately, I know the wrong stuff. (ie: hacking)
One day, if you are ever married and have children or simply just have children you will eventually look at one of your teens and fully understand just how dumb you were at age 16. We all do.
Your dealing with people here that volunteer their time. Many have full time jobs and families. No one is paid for this. Having an attitude with one of those that volunteer to help you is never mature and usually is unwise.
Now, no one called you dumb, but you were advised twice to pursue the mod_security issue. That was advised because it is a known issue and occurs regardless ( as far as I know ) of SMF version. Take that advice and call GoDaddy.
Quote from: Kindred on February 16, 2014, 10:28:53 PM
how did I act like you are dumb?
I don't know your age... and don't care (heck, we've had younger folks on the team)
I answered your question, same as I do everyone else.
The agent just said I'm on a shared server.
So if he turns off he said it will affect others.
They always say that. :)
Let them know this is a known issue and then ask for the next level of support. You will need to push them so let them know that you expect your trouble to be escalated to the next level of support. Now, you may not get anyone back to you until tomorrow so be prepared to wait a bit.
I had the same problem as you with a couple of sites I admin. My host took care of the problem once he was notified.
Are you using any security mods for spammers or firewalls?
He said the reason im getting the error is because apparently its trying to use shell commands? and apparently thats why its flagging it?
They say that too. :)
Demand tier 2 support. Also consider moving to another host if possible.
Here is a very good host for you to use if GD does not work with you.
http://www.charlottezweb.com/ (http://www.charlottezweb.com/)
It is very simple to move your domain. In fact you don't even need to move it, just have it pointed to the new nameservers for who ever the new host may be. You can do that in your customer panel at GD. Your paying good money for a service from GD so don't let them stonewall you. Demand tier 2 support.
edit: did GoDaddy acknowledge that they have mod_security turned on?
He told me to ask you guys if there is any type of shell injection or shell scripts in the standard install script?
Well, that script would be the install.php I believe. I have not read it in a good while but I do not recall anything that looks like an injection attempt. It does however create the MySQL database for you.
Kindred would be the best source of knowledge for that. Or another team member here.
I don't know what to do in this situation.
Should I just switch? I asked him for tier 2 support and hes just trying to avoid it.
Well, I know it is frustrating. They play that way and I really do not understand why. Threaten to leave them and see what happens. If you do move to Charlottezweb tomorrow he will usually have your stuff built in a few hours for you ... or less. You would only need to have your domain .. mydomain.com or whatever, pointed to the new host. That is very simple and is done in your customer panel for GD, if you have one. If not, ask them to point to the new nameservers. The new host will give you those names.
I did take a look at install.php and the MySQL installer. No obvious attempts at injection but they are scripts and they do possess some characters that mod_security would read as an injection attempt.
If GD is not going to play ball with you then move your service to another host. They won't miss you but you deserve to be treated better than what they are treating you.
Do you know if the Linux hosting plan lets them switch the mod security without affecting others?
They should be able to whitelist your domain without affecting anyone else.
Depending on if they are using modsec1 or modsec2 also determines how it can be done.
I have had this same problem on a Joomla install, a SMF install and another forum software install. It was always mod_sec causing the problem.
If you move to another host let them know you are moving due to mod_sec. If you are using 2.0.7 then ask for a server with PHP 5.5. If you can not get that 5.5 then install 2.0.6 on a 5.4 or lower PHP version.
Now, you could try installing 2.0.6 on the GD server and see how it works out.
He just said they made some changes in the mod_security thing and to let it take about an hour to take affect.
Does that seem about right?
Yep .. that sounds about right. It can actually be quicker but the host will always pad the time a bit. I can't blame them for that. :) If you tell a customer it will be ready in 5 minutes they expect it in 5 minutes. Always tell them it takes longer and deliver it in half the stated time. :)
They probably are not whitelisting your domain but are writing a rule set for your domain. Someone else in GD is now working your problem and they probably have seen this before with SMF or other software. They will write a ruleset and push it to the server. Soon you will be good to go.
Good for you for standing your ground with them. Sometimes you have to do that. :)
Quote from: Lou69 on February 17, 2014, 12:19:20 AM
Yep .. that sounds about right. It can actually be quicker but the host will always pad the time a bit. I can't blame them for that. :) If you tell a customer it will be ready in 5 minutes they expect it in 5 minutes. Always tell them it takes longer and deliver it in half the stated time. :)
Good for you standing your ground with them. Sometimes you have to do that. :)
Well I was on the phone for about 2 and a half hours.
Is that all! :laugh:
Well, that is a long time actually but sometimes you have to be the squeaky wheel when dealing with customer service with any company. Usually squeaking and being nice goes a long ways with a CSR rep.
GD is a huge outfit with probably a thousand CS reps and not all have the same level of understanding. Sometimes you get the person that understands right away and sometimes you have to squeak for a good while. :)
Quote from: Lou69 on February 17, 2014, 12:26:16 AM
Is that all! :laugh:
Well, that is a long time actually but sometimes you have to be the squeaky wheel when dealing with customer service with any company. Usually squeaking and being nice goes a long ways with a CSR rep.
GD is a huge outfit with probably a thousand CS reps and not all have the same level of understanding. Sometimes you get the person that understands right away and sometimes you have to squeak for a good while. :)
Yeah I get ya lol.
Well, thank's a lot for helping me through the whole time I was on the phone and off :)
Glad to help you. :)
If after GD does their magic, should you still have problems, continue to work with them. They may need to work with the rule set a bit. Probably though they will get a good rule set for you the first time.
When it all works, please come back and mark the thread as solved so others will know to use your experience as a learning tool.
Good luck with the new site! :)
Should it be working by now?
I just tried it and it's still giving me the error.
Should I give it more time?
Oh yeah, defintely give it the full hour. It really does take more than 5 minutes. :) At this time of the night, it may actually may take longer should they have any maintenance activity or mirroring activity going on. Give it an hour at least.
If you have FTP ( filezilla ) then do not use any auto install facility that GD may have. Go to the Downloads page here and download the 2.0.6 version and install it. You will have to unzip the package on your PC and upload it with Filezilla. Then do the install. Don't try to use the package you have on the server now. Delete it and start anew.
Don't use the 2.0.7 yet as I don't think you are on a PHP 5.5 server, though you may be. Use 2.0.6 first. You can ask GD what the PHP version is when you next talk with them. If you have CPanel access, the version will be listed on the left side of the panel. If you do not have Filezilla or are not familiar with it then certainly use the GD tool for auto install.
I already used their installatron for the process he led me through.
And it installed 2.0.7 Simple Machines. Should I just keep it the way it is now?
Sure, keep it on 2.0.7 if it is installed now and working.
2.0.6 is a known safe version for 5.4 and below.
2.0.7 is a known safe version but it prefers 5.5.
So keep it on 2.0.7 if he has worked with you on getting it installed. You should be good to go. :)
When you are satisfied with the install please mark the thread solved so others can learn from your experience.
Alright. I'ma head to bed and fill you in the news in the morning.
It's 1:00 AM here.
Lol. Good night mate and thank you for all your help.
You are very welcome. :)
Nope. The problem is still occuring.
Ugh! Well, you will have to talk with them again. Have their tech on line, get them to do the walk through install and then ask them to access the site. They will need to work on the rule set again. Force the issue with them, especially as they did the install with you last night. It could also be that after their tech wrote the rule set it got mangled in mid-night server maintenance. You may be back to the default/original rule set.
As you are not using any other security mod the issue will lay with their server and mod_security. They will need to alter the rule set again.
Would you recommend I try re-installing the Simple Machines through the installatron again then?
Honestly no.
You should never use such auto installers, because you have no real control over the extra crap that they install. If you are going to try a reinstall, I would suggest just using the standard smf install package from our download site here.... (Instructions are clearly detailed in the wiki)
Quote from: Kindred on February 17, 2014, 09:46:59 AM
Honestly no.
You should never use such auto installers, because you have no real control over the extra crap that they install. If you are going to try a reinstall, I would suggest just using the standard smf install package from our download site here.... (Instructions are clearly detailed in the wiki)
Alright, thank you Kindred, sir.
I'll keep you guys notified on what's going on.
I'm on a live support chat with them now, and I'm not going to go easy on them anymore.
This is taking too long.
Good for you. Stand on them. :)
If you do not have an FTP software you can download FileZilla from here: https://filezilla-project.org/download.php?show_all=1
You want the win32 setup.exe file.
Quote from: Lou69 on February 17, 2014, 09:56:41 AM
Good for you. Stand on them. :)
If you do not have an FTP software you can download FileZill from here: https://filezilla-project.org/download.php?show_all=1
You want the win32 setup.exe file.
This is the Live support chat I'm having with them: (Note that I did choose domain support, because they don't have hosting support live chat support. They only have phone. But, I'm going to see if they still help me even in the wrong department)
Like, I'm getting just too frustrated. I'm at the point where I'm 99% debating to switch back to hostgator.
6:51:49 AM
Thad
We do not normally support Hosting services. Let me take a look and see what I can find out
6:51:55 AM
Customer
It's so simple and you guys should be able to fix it.
6:52:05 AM
Customer
This is something big that others have experienced as well and you guys should work your hardest to help us customers. Working hard isn't me being on the phone for 2 and a half hours as that happened last night.
They asked me for my IP, which I gave them.
Is that normal?
Hmmm, yeah. What they are doing is whitelisting or writing rules for your IP address so that their security does not block you. Only problem is that your IP is probably DHCP ( dynamic ) and may change from time to time. But this is a good start.
Yeah exactly.
I'm at my trailer right now, which isn't my main internet.
So when I go home, the problem will probably occur again right?
It could. The important aspect is for them to lessen the security for your site to function. But, that should be across the 'board' and not necessarily based on an IP. At present you are unable to do any admin type function regardless of IP, so they need to ease up a bit on mod_security regardless of your IP.
After that is squared away you can use a script such as crawlprotect to strengthen your site. You want them to protect your site but not keep you out and you also want to protect your site with your own tools.
Threatened them for the fifth or something time now. I said this in the ticket:
I don't mean to be mean, but I am now at the point where I am demanding this to get resolved. If this simple issue isn't resolved in approximately a day , I'm switching hosts.
Sorry, and thank you.
It should be noted also that this *IS* a known issue and it was *ALWAYS* solved by them disabling mod_security.
Also, we tried several times to get them to tell us (our devs) what exactly is triggering mod_security so that we can fix it on our side. They never contacted us.
So...
Quote from: margarett on February 17, 2014, 11:04:36 AM
It should be noted also that this *IS* a known issue and it was *ALWAYS* solved by them disabling mod_security.
Also, we tried several times to get them to tell us (our devs) what exactly is triggering mod_security so that we can fix it on our side. They never contacted us.
So...
Yeah!
That's why I'm siding with you guys.
This is a known issue that obviously they're aware of. Multiple simple machine members have had this issue. If the resolution is just disabling it, they need to do that!
On the phone with them again. About to speak with an agent.
Any tips before the call starts guys? Besides going hard on them?
They told me again that the mod security cannot simply be turned off because im not on a dedicated server. So he said it will affect other people.
and we KNOW that they are fibbing.... because a dozen other folks here have already gone through the same thing -- and after hours or days of back and forth, they finally make it to someone in level 2 or level 3 service who goes "oh yeah -- done"
Seriously this has become such an issue that they should have this in the level 1 scripts "Please forward on to level 2 support"
- Solved.
They fixed my IP and the Developer made sure to include something in which if my IP get's reset and it seems to work.
I used my dad's iPhone on 3G and the buttons still worked.
If anyone else experiences this, make sure if you're using GD (GoDaddy) or any other sucker host, make sure to push them as hard as you can. Don't kiss their you know what. If they're going to play hardball, you're going to play ball with them.
:) Cool beans. Glad you stuck with it and got your site going.