Page 1 of 1
403 error saving templates with <__script__> tag
Posted: Sat Apr 15, 2006 3:01 am
by estring
I've been racking my brain on this one for a while now. I am receiving the following 403 error whenever I try to edit a template that contains a "" tag.
403 Forbidden
You don't have permission to access /cmsms_folder/admin/edittemplate.php on this server.
The error occurs when I click the Preview, Submit, Apply, or Cancel buttons on edittemplate.php. This is even occurring when I open up one of the supplied templates like "CSSMenu Horiz 1 col" and try to save without changes, because of the line:
I verified permissions were properly configured, in testing I even updated all files permissions to "777" and still got the same error. If I remove the tags, the template saves without problems.
Here's my server info:
OS: Linux
Apache 1.3.34
MySQL 5.0.19
PHP 4.4.2
Browsers: IE 6.0, Firefox 1.5.0.1
I was performed fresh installs of 0.12.1, 0.12, and 0.11.2 and was able to reproduce the error on all three CMSMS versions.
Does anyone have any ideas, I'm kind of at a loss at this point? The same installs and templates work fine on my local machine.
thanks, estring
Re: 403 error saving templates with <__script__> tag
Posted: Mon Apr 17, 2006 3:15 am
by estring
Here's some additional information on the problem. I get the same error when trying to Add User Defined Tag that contains a "" tag.
It looks like it may be a parsing error when trying to interpret the "" tag,, but I haven't been able to figure out what is wrong. I anyone has any clue what the problem could be, I would greatly appreciate it.
Here are the server log entries from when the error occured:
Code: Select all
[Sun Apr 16 22:44:40 2006] [error] [client 69.14.133.100] mod_security: Access denied with code 403. Pattern match "[:space:]*script" at ARGS_SELECTIVE [hostname "www.estringmedia.com"] [uri "/cmshome/admin/edittemplate.php"] [unique_id "REMBGH8AAAEAAH0Uc1Q"]
[Sun Apr 16 22:49:25 2006] [error] [client 69.14.133.100] mod_security: Access denied with code 403. Pattern match "[:space:]*script" at ARGS_SELECTIVE [hostname "www.estringmedia.com"] [uri "/cmshome/admin/adduserplugin.php"] [unique_id "REMCNX8AAAEAADoN@Dg"]
I would appreciate any thought or ideas. Thanks in advance.
estring
Re: 403 error saving templates with <__script__> tag
Posted: Mon Apr 17, 2006 2:50 pm
by Dr.CSS
does that script look like one of these?,,
the blue one is just for IE
mark
Re: 403 error saving templates with <__script__> tag
Posted: Mon Apr 17, 2006 3:19 pm
by estring
Yes. Any script tag reference causes the same problems. I've performed a completely new install multiple times and even without making any changes, if I try opening the either of the CSSMenu templates (CSSMenu Horiz 1 col or CSSMenu Vert 1 col) I receive the same error when trying to Preview Submit, Apply or Cancel.
In fact, I even tried creating a blank template and only added "" tags after the {stylesheet} tag and still received an error. Here's the test template code that is producing the error:
Code: Select all
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<__html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >
<head>
<title>{title}</title>
{metadata}
{stylesheet}
<__script__></__script>
</head>
</__body>
{content}
<__body>
</__html>
I'm not sure what is going on.
Re: 403 error saving templates with <__script__> tag
Posted: Mon Apr 17, 2006 4:59 pm
by Dr.CSS
which browser are you using?
mark
Re: 403 error saving templates with <__script__> tag
Posted: Mon Apr 17, 2006 5:34 pm
by estring
I get the errors using all browsers. I've tested with IE, Firefox, Netscape and Opera.
Re: 403 error saving templates with <__script__> tag
Posted: Mon Aug 28, 2006 6:41 pm
by jmiranda
I had the same problem. I thought it had something to do with Apache or MySQL versions. I contacted the guys that host my website telling them the procedure to obtain the error. In the end it was actually a permission in Apache that was not activated (don't know wich
)
Hope this helps!
jmiranda
Re: 403 error saving templates with <__script__> tag
Posted: Wed Nov 22, 2006 1:50 pm
by Solitary
Hi,
I started getting the same problem. It gives me a 403 error every time I try to submit some code with tags and also I'm unable to preview any of my pages.
Can anyone help me?
Thanks a lot.
Re: 403 error saving templates with <__script__> tag
Posted: Wed Nov 22, 2006 2:16 pm
by Ted
It's because of your host enabling mod_security. You'll have to work with them to either disable it or at least give the admin directory of CMSMS less restrictions.
Re: 403 error saving templates with <__script__> tag
Posted: Wed Nov 22, 2006 11:03 pm
by Solitary
Thanks a lot for the info.
I contacted my hosting company and they came back to me with this:
"In your .htaccess add:
SecFilterEngine Off"
Everything is now working as before.