403 error saving templates with <__script__> tag

estring · Post by **estring** » Sat Apr 15, 2006 3:01 am

I've been racking my brain on this one for a while now. I am receiving the following 403 error whenever I try to edit a template that contains a "" tag.

403 Forbidden
You don't have permission to access /cmsms_folder/admin/edittemplate.php on this server.

The error occurs when I click the Preview, Submit, Apply, or Cancel buttons on edittemplate.php. This is even occurring when I open up one of the supplied templates like "CSSMenu Horiz 1 col" and try to save without changes, because of the line:

I verified permissions were properly configured, in testing I even updated all files permissions to "777" and still got the same error. If I remove the tags, the template saves without problems.

Here's my server info:
OS: Linux
Apache 1.3.34
MySQL 5.0.19
PHP 4.4.2
Browsers: IE 6.0, Firefox 1.5.0.1

I was performed fresh installs of 0.12.1, 0.12, and 0.11.2 and was able to reproduce the error on all three CMSMS versions.

Does anyone have any ideas, I'm kind of at a loss at this point? The same installs and templates work fine on my local machine.

thanks, estring

estring · Post by **estring** » Mon Apr 17, 2006 3:15 am

Here's some additional information on the problem. I get the same error when trying to Add User Defined Tag that contains a "" tag.

It looks like it may be a parsing error when trying to interpret the "" tag,, but I haven't been able to figure out what is wrong. I anyone has any clue what the problem could be, I would greatly appreciate it.

Here are the server log entries from when the error occured:

Code: Select all


[Sun Apr 16 22:44:40 2006] [error] [client 69.14.133.100] mod_security: Access denied with code 403. Pattern match "[:space:]*script" at ARGS_SELECTIVE [hostname "www.estringmedia.com"] [uri "/cmshome/admin/edittemplate.php"] [unique_id "REMBGH8AAAEAAH0Uc1Q"]

[Sun Apr 16 22:49:25 2006] [error] [client 69.14.133.100] mod_security: Access denied with code 403. Pattern match "[:space:]*script" at ARGS_SELECTIVE [hostname "www.estringmedia.com"] [uri "/cmshome/admin/adduserplugin.php"] [unique_id "REMCNX8AAAEAADoN@Dg"]

I would appreciate any thought or ideas. Thanks in advance.
estring

Dr.CSS · Post by **Dr.CSS** » Mon Apr 17, 2006 2:50 pm

does that script look like one of these?,,

the blue one is just for IE

mark

estring · Post by **estring** » Mon Apr 17, 2006 3:19 pm

Yes. Any script tag reference causes the same problems. I've performed a completely new install multiple times and even without making any changes, if I try opening the either of the CSSMenu templates (CSSMenu Horiz 1 col or CSSMenu Vert 1 col) I receive the same error when trying to Preview Submit, Apply or Cancel.

In fact, I even tried creating a blank template and only added "" tags after the {stylesheet} tag and still received an error. Here's the test template code that is producing the error:

Code: Select all

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<__html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >
<head>
<title>{title}</title>
{metadata}
{stylesheet}

<__script__></__script>

</head>
</__body>
{content}
<__body>
</__html>

I'm not sure what is going on.

Dr.CSS · Post by **Dr.CSS** » Mon Apr 17, 2006 4:59 pm

which browser are you using?

mark

estring · Post by **estring** » Mon Apr 17, 2006 5:34 pm

I get the errors using all browsers. I've tested with IE, Firefox, Netscape and Opera.

jmiranda · Post by **jmiranda** » Mon Aug 28, 2006 6:41 pm

I had the same problem. I thought it had something to do with Apache or MySQL versions. I contacted the guys that host my website telling them the procedure to obtain the error. In the end it was actually a permission in Apache that was not activated (don't know wich $:-\$ )

Hope this helps!

jmiranda

Solitary · Post by **Solitary** » Wed Nov 22, 2006 1:50 pm

Hi,
I started getting the same problem. It gives me a 403 error every time I try to submit some code with tags and also I'm unable to preview any of my pages.

Can anyone help me?

Thanks a lot.

Ted · Post by **Ted** » Wed Nov 22, 2006 2:16 pm

It's because of your host enabling mod_security. You'll have to work with them to either disable it or at least give the admin directory of CMSMS less restrictions.

Solitary · Post by **Solitary** » Wed Nov 22, 2006 11:03 pm

Thanks a lot for the info.
I contacted my hosting company and they came back to me with this:

"In your .htaccess add:

SecFilterEngine Off"

Everything is now working as before.

CMS Made Simple Forums

403 error saving templates with <script> tag

403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag

Re: 403 error saving templates with <script> tag