403 Forbidden using certain features

[Jessica.C]

I have a knowledge base mod installed on my site, and up until today I have had no issues with adding or editing articles.......but now, all of the sudden, I cannot do either. I have already posted in the mod's support topic on the phpBB community site in case it is the modification itself.

Anyways, when I try editing or adding a new article, I get this error message:
Forbidden
You don't have permission to access /phpBB3/kb.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.


I checked the file permission and it's at 744...


I am also getting it on certain pages on another site that does not have this mod. So it has to be x10, right?

 

[Jessica.C]

Still getting this error. What is going on?

 

[leafypiggy]

What is the content of the KB article you are trying to post?

I'm seeing that it is being blocked by mod_security due to a potential XSS (cross site-scriting) attack.

 

[Jessica.C]

It's just a little snippet (not created by me; I have linked to the topic by the person who did create it)

credit
Open styles/prosilver/template/viewtopic_body.html
Find:

<!-- IF S_DISPLAY_RESULTS --><dd class="resultbar">

Replace with:

<!-- IF S_DISPLAY_RESULTS --><dd class="resultbar"><div class="meter">

Find:

{poll_option.POLL_OPTION_RESULT}</div></dd>

Replace with:

{poll_option.POLL_OPTION_RESULT}&nbsp;</div></div></dd>

Open styles/prosilver/theme/colours.css
Find:

.rtl .pollbar5 {
   border-left-color: # D11A4E;
}

Add after:

/* CoolPoll (http://www.electric-house.ru)
-----------------------------v.1.0.3--- */

.pollbar1 {
   background-color: #4069D1; /* blue */
   background-image: linear-gradient(
   135deg, rgba(0, 0, 128, 0.2) 25%,
   transparent 25%,
   transparent 50%,
   rgba(0, 0, 128, 0.2) 50%,
   rgba(0, 0, 128, 0.2) 75%,
   transparent 75%,
   transparent);
}

.pollbar2 {
   background-color: #2BC253; /* green */
   background-image: linear-gradient(
   135deg,
   rgba(84, 240, 84, 0.2) 25%,
   transparent 25%,
   transparent 50%,
   rgba(84, 240, 84, 0.2) 50%,
   rgba(84, 240, 84, 0.2) 75%,
   transparent 75%,
   transparent);
}

.pollbar3 {
   background-color: #FFD800; /* yellow */
   background-image: linear-gradient(
   135deg,
   rgba(216, 177, 0, 0.2) 25%,
   transparent 25%,
   transparent 50%,
   rgba(216, 177, 0, 0.2) 50%,
   rgba(216, 177, 0, 0.2) 75%,
   transparent 75%,
   transparent);
}

.pollbar4 {
   background-color: #f1a165; /* orange */
   background-image: linear-gradient(
   135deg,
   rgba(243, 109, 10, 0.2) 25%,
   transparent 25%,
   transparent 50%,
   rgba(243, 109, 10, 0.2) 50%,
   rgba(243, 109, 10, 0.2) 75%,
   transparent 75%,
   transparent);
}

.pollbar5 {
   background-color: #f0a3a3; /* red */
   background-image: linear-gradient(
   135deg, rgba(244, 35, 35, 0.2) 25%,
   transparent 25%,
   transparent 50%,
   rgba(244, 35, 35, 0.2) 50%,
   rgba(244, 35, 35, 0.2) 75%,
   transparent 75%,
   transparent);
}

@keyframes move {
  from { background-position: 0 0; }
  to   { background-position: 100px 50px; }
}

@-webkit-keyframes move {
   0% {background-position: 0 0;}
   100% {background-position: 100px 50px;}
}

.meter {
   background-color: #E0E3E0;
   height: 15px;
   padding: 1px !important;
   margin: 0;
   -moz-border-radius: 5px;
   -webkit-border-radius: 5px;
   border-radius: 5px;
   -moz-box-shadow: 0 1px 5px #000 inset, 0 1px 0px #fff;
   -webkit-box-shadow: 0 1px 5px #000 inset, 0 1px 0px #fff;
   box-shadow: 0 1px 5px #000 inset, 0 1px 0px #fff;
}

.meter > div {
   position: relative;
   height: 100%;
   padding: 0 !important;
   border: none;
   border-top-right-radius: 3px;
   border-bottom-right-radius: 3px;
   border-top-left-radius: 3px;
   border-bottom-left-radius: 3px;
   box-shadow:
      inset 0 2px 9px  rgba(255,255,255,0.3),
      inset 0 -2px 6px rgba(0,0,0,0.4);
   overflow: hidden;
    animation: move 3s linear 0s normal none infinite ;
   -webkit-animation: move 3s linear infinite;
   background-size: 50px 50px;
}

It's not only happening when posting new articles though. I get it when EDITING them too - and the edits I'm trying to submit are very minor. I also get them on another site I own (subdomain of my main site). That site uses phpBB 3.1.2, and I have installed an extension called "Upload extensions". One of its features is that I can directly upload an extension that has been validated (there is a dropdown). However, when I choose one, then press "Upload". I get the 403 error - which is nearly identical to the error I posted in my first post, except it says "You don't have permission to access /ascraeus/adm/index.php on this server."


EDIT: Okay I think you may be right...I tried adding a nonsense article that just had some random nonsense typed into it and it submitted. Dang

 

[Jessica.C]

Can someone turn off mod_security on my account? It seems like this is the reason I'm getting the error all of the sudden

 

[Ohso]

I thought Prime Accounts could turn mod_security off?


also really, I'm asking because I would like to know if it's possible to disable it with prime account.

 

[bdistler]

I thought Prime Accounts could turn mod_security off?

when you upgrade a basic free-hosting account to "Prime" it is on the same free-hosting server (same place as it was)
YOU can not turn mod_security off - on any free-hosting server