Advertisement:

Author Topic: Having problems with mod_security?  (Read 311532 times)

Offline LostProphecy

  • Jr. Member
  • **
  • Posts: 381
  • Gender: Female
    • The Lost Prophecy
Re: Having problems with mod_security?
« Reply #20 on: January 12, 2006, 10:06:06 PM »
something interesting that i've come across when trying to do this... i've never touched these files before cause i didn't even know what they were for, however when i went looking for them i found that i had two, one renamed that was last edited 12 june 2005 and a new one edited 17 june 2005...

i've never touched them however they have been changed

the 12 june one had this in it (the renamedone)

Code: [Select]
# -FrontPage-

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*

<Limit GET POST>
order deny,allow
deny from all
allow from all
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
AuthName www.lostprophecy.com
AuthUserFile /home/kodee1/public_html/_vti_pvt/service.pwd
AuthGroupFile /home/kodee1/public_html/_vti_pvt/service.grp

but the new one that replaced it has nothing in it...

i'm wondering if this might be causing the log in problems, or if infact having it blank might cause other problems
Angelus Ex Quo Nox

Offline jennielinn

  • Newbie
  • *
  • Posts: 3
Re: Having problems with mod_security?
« Reply #21 on: March 19, 2006, 06:48:27 AM »
Well greyknight directed me to this fix and it worked like a charm ;D
I was getting the "not acceptable" error when I clicked "current theme settings" and "layout" in Forum
Setting. I did the htaccess fix and now no worries, you all are the greatest :)


Offline Quoth

  • Semi-Newbie
  • *
  • Posts: 74
  • Gender: Male
    • Broken-Reality
Re: Having problems with mod_security?
« Reply #22 on: March 22, 2006, 12:41:22 PM »
Excellent quick fix, my forums now run smoothly in both browsers as i seemed to get this more with IE than firefox. It also seems it's fixed some of the session errors i was having with logging off.

Thanks [Unknown]!

Offline drdave

  • Semi-Newbie
  • *
  • Posts: 60
Re: Having problems with mod_security?
« Reply #23 on: March 25, 2006, 12:07:23 AM »
Ok maybe I missed it but once I create the .htaccess file where do I place it on my server?

Thanks
Dave

Offline JayBachatero

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 19,562
  • Gender: Male
    • @jaycreations on Twitter
    • JayBachatero.com
Re: Having problems with mod_security?
« Reply #24 on: March 25, 2006, 12:22:35 AM »
In the forum's root folder along with Settings.php, index.php and so on.
Follow me on Twitter

"HELP!!! I've fallen and I can't get up"
This moment has been brought to you by LifeAlert

Offline drdave

  • Semi-Newbie
  • *
  • Posts: 60
Re: Having problems with mod_security?
« Reply #25 on: March 25, 2006, 12:23:48 AM »
Great thanks!

Dave

Offline Tazpot

  • Semi-Newbie
  • *
  • Posts: 12
  • Gender: Male
    • The Taffyshack
Re: Having problems with mod_security?
« Reply #26 on: April 06, 2006, 06:29:30 PM »
Fantastic that sorted all my troubles out.
I was getting a stupid 403 error when trying to install smfarcade and couldn't figure why, then i stumbled upon this nifty post

 [unknown] you are a God!!   ;)
[nofollow]

Offline RoarinRow

  • Full Member
  • ***
  • Posts: 662
  • Gender: Male
  • Ride my AV!
    • Avalanche Style
Re: Having problems with mod_security?
« Reply #27 on: May 17, 2006, 03:07:25 PM »
I got this 'HTTP Error 403 - Forbidden error' today, which I haven't seen in a while.  The last time I saw it I was installing Arcade games.  It went away by itself.

I tried the fix on the first page, but I got this error from my FTP application:

350 File exists, ready for destination name
    RNTO .htaccess
550 Permission denied on server.  You are restricted to your account.
    DELE htaccess.txt

I guess there's one there, but I can't see it.  I use SmartFTP 1.5.

Before I got this error message I was just refreshing the page.  I couldn't see the avatars, just a blank box.  Then I went to the forum/index page, then it was ok. then I refreshed the page one more time, then I got this error.  Shocked me cause it was in red bold lettering.

Any ideas?  I will also report to my web host.

Thanks!
« Last Edit: May 17, 2006, 03:10:38 PM by RoarinRow »

SMF 2.0
TP 1.0 RC1.1
Wordpress 3.1.3

Offline redone

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,938
  • Gender: Male
Re: Having problems with mod_security?
« Reply #28 on: May 17, 2006, 03:10:20 PM »
If I am reading you right and you cannot remove a file via ftp contact your host and you will be able to resolve it. Sometimes the way the server is set up there can be some instances when a file is created and you cannot remove it yourself. Send them the details of the file you cannot remove.


Offline RoarinRow

  • Full Member
  • ***
  • Posts: 662
  • Gender: Male
  • Ride my AV!
    • Avalanche Style
Re: Having problems with mod_security?
« Reply #29 on: May 17, 2006, 03:13:22 PM »
If I am reading you right and you cannot remove a file via ftp contact your host and you will be able to resolve it. Sometimes the way the server is set up there can be some instances when a file is created and you cannot remove it yourself. Send them the details of the file you cannot remove.



Doing that now, thanks!

SMF 2.0
TP 1.0 RC1.1
Wordpress 3.1.3

Offline BigMike

  • Full Member
  • ***
  • Posts: 635
  • Gender: Male
    • http://facebook.com/huusoku on Facebook
    • Marlin Crawler, Inc.
Re: Having problems with mod_security?
« Reply #30 on: June 01, 2006, 12:22:20 PM »
Thankyou again Unknown. Last night right at midnight, this problem started happening on our forum.

A couple of searches later and it was resolved ;)

This must have been the quickest issue I've ever fixed before lol

Cya
BigMike

Offline Overseer

  • Sr. Member
  • ****
  • Posts: 746
  • Gender: Male
    • dubcc.com - West Coast Connection Forum
Re: Having problems with mod_security?
« Reply #31 on: July 17, 2006, 04:40:35 PM »
i had this appear today too after restarting my VPS

Offline JayBachatero

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 19,562
  • Gender: Male
    • @jaycreations on Twitter
    • JayBachatero.com
Re: Having problems with mod_security?
« Reply #32 on: July 17, 2006, 04:53:12 PM »
Did you try the .haccess changes?
Follow me on Twitter

"HELP!!! I've fallen and I can't get up"
This moment has been brought to you by LifeAlert

Offline Jared867

  • Semi-Newbie
  • *
  • Posts: 10
Re: Having problems with mod_security?
« Reply #33 on: August 08, 2006, 10:12:36 AM »
Thank you Unknown. That worked like a charm!

Offline G.I. Jimbo

  • Newbie
  • *
  • Posts: 9
Re: Having problems with mod_security?
« Reply #34 on: August 19, 2006, 12:10:45 AM »
I just installed the SMF forum software onto my account.  As soon as everything was done installing, I tried to go to the index.php page to set things up but got a blank page.  I asked for help with this in another thread but was told to come here.  I tried the whole htaccess thing and my problem was not fixed.  Any other ideas?  My host is 1500mb.com and my site is galaxymod.1500mb.com/forum

Offline silencer0

  • Newbie
  • *
  • Posts: 6
Re: Having problems with mod_security?
« Reply #35 on: August 26, 2006, 10:33:00 AM »
THX SO MUCH NOW IT WORKS MY PROBLEM IS "[solved]" lol HAHAHA THX SO MUCH :D :D :D

Offline Jacen

  • Jr. Member
  • **
  • Posts: 375
  • Gender: Male
Re: Having problems with mod_security?
« Reply #36 on: September 07, 2006, 11:04:57 PM »
Just a suggestion to the dev crew: Is it possible to get a little warning to appear to admins (only admins) if mod_security is installed?
"I've always found that sticking your fingers in your ears and humming loudly solves a whole slew of problems."

Offline marcnyc

  • Full Member
  • ***
  • Posts: 457
Re: Having problems with mod_security?
« Reply #37 on: October 09, 2006, 12:58:15 PM »
Code: [Select]
<IfModule mod_security.c>
# Turn off mod_security filtering.  SMF is a big boy, it doesn't need its hands held.
SecFilterEngine Off

# The below probably isn't needed, but better safe than sorry.
SecFilterScanPOST Off
</IfModule>

-[Unknown]

thanks Unkown, your workaround worked perfectly...
just a question: am I supposed to put this stuff in a .htaccess file within the SMF folder? or is it safe to put it in the main .htacess file of the whole website (in the root)? in other words, I put it in the root's .htaccess and it seems to ahve fixed the SMF problem (which is not in the root) but I was wondering if I am exposing myself to other risks having it in the root.

Thanks

Offline 青山 素子

  • Server Team
  • SMF Super Hero
  • *
  • Posts: 17,025
  • 戦場ヶ原、蕩れ!
    • srvrguy on GitHub
    • @motokochan on Twitter
    • Nekomusume Moe
Re: Having problems with mod_security?
« Reply #38 on: October 09, 2006, 02:16:22 PM »
It is possible you will expose yourself to some problems if you turn mod_security off sitewide, especially if you run other dynamic software (blog, poll, etc)
Motoko-chan
Director, Simple Machines

Just because it's pouring down doesn't mean we're gonna drown. There's a time when all you can say is let it rain - Mat Kearney (Let It Rain)

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


Offline Aquire

  • Semi-Newbie
  • *
  • Posts: 28
Re: Having problems with mod_security?
« Reply #39 on: October 23, 2006, 10:35:22 AM »
Thank you

You have save my life ... ;D