| Author |
Message |
Jacky intel inside

Joined: 01 Jan 2005 Posts: 3794
|
Posted: Thu Jun 14, 2007 9:00 pm Post subject: Encountered "403 Forbidden" for Cash MOD Configura |
|
|
I know LifelessPeople have some additional security measures built in, and I am well aware of the CHMOD restrictions.
My /admin/cash_config.php has been CHMOD 644 and none of my files are CHMOD 666.
I tried turning SecFilterEngine off but it's not affecting that.
Any ideas?
All settings except Cash Configuration could be accessed. _________________ 3.141592653589793238462643383279502884197169399375105820974944592307816406286208998628034825342
11706798214808651328230664709384460955058223172535940812848111745028410270193852110555964462294
89549303819644288109756659334461284756482337867831652712019091456485669234603486104543266482133
9360726024 |
|
| Back to top |
|
| |
LP-Trel Zen

Joined: 02 Dec 2002 Posts: 5751 Location: Nirvana by Boredom
|
Posted: Fri Jun 15, 2007 12:57 am Post subject: |
|
|
Put in a support ticket so I can check into this.
Note: SecFilterEngine off can be dangerous when used incorrectly. It is standing policy that your account be immediately suspended if a website on the account is compromised in any way if "SecFilterEngine off" is in any .htaccess files of the account. _________________ * Knowledge Base * Wiki * Forum FAQs * |
|
| Back to top |
|
| |
Jacky intel inside

Joined: 01 Jan 2005 Posts: 3794
|
Posted: Fri Jun 15, 2007 1:19 am Post subject: |
|
|
| LP-Trel wrote: | Put in a support ticket so I can check into this.
Note: SecFilterEngine off can be dangerous when used incorrectly. It is standing policy that your account be immediately suspended if a website on the account is compromised in any way if "SecFilterEngine off" is in any .htaccess files of the account. | Thanks for the information.
The "SecFilterEngine off" was used while installing a phpBB MOD. For some reasons mod_security gave a 403 Forbidden error while installing it, so I turned it off for that moment. _________________ 3.141592653589793238462643383279502884197169399375105820974944592307816406286208998628034825342
11706798214808651328230664709384460955058223172535940812848111745028410270193852110555964462294
89549303819644288109756659334461284756482337867831652712019091456485669234603486104543266482133
9360726024 |
|
| Back to top |
|
| |
Scott tutorialtoday.com

Joined: 24 Mar 2005 Posts: 2632 Location: Mississauga, Ontario
|
Posted: Fri Jun 15, 2007 5:50 am Post subject: |
|
|
I don't know if this will be any help, but I have experienced this before on this server and someone else has on this forum as well. I created a file called edit_config.php and I couldn't access it because I kept getting the same error, so I finally found out that when I just changed the name to "edit_conf.php" it worked fine. Is there a security measure in place that prevents people from accessing scripts with "config" in the name? _________________ Tutorial Management Script - Version 1.4 Released
TutorialToday - Up and running, submit your tutorials!
Linux Tutorials - Coming Soon |
|
| Back to top |
|
| |
Desbrina Jadeite

Joined: 11 Jun 2005 Posts: 2985 Location: Earth
|
|
| Back to top |
|
| |
Jacky intel inside

Joined: 01 Jan 2005 Posts: 3794
|
Posted: Thu Jun 21, 2007 1:45 pm Post subject: |
|
|
Thanks to Trel's usual efficiency, this was solved in a few days.
Now you can access files with "config.php" in their filenames.  _________________ 3.141592653589793238462643383279502884197169399375105820974944592307816406286208998628034825342
11706798214808651328230664709384460955058223172535940812848111745028410270193852110555964462294
89549303819644288109756659334461284756482337867831652712019091456485669234603486104543266482133
9360726024 |
|
| Back to top |
|
| |
|
|
|