403 Forbidden
- Thread starter asasin
- Start date
- Status
asasin
New Member
- Messages
- 28
- Reaction score
- 0
- Points
- 1
hi i am now having a problem with the Photos feature. when i click "upload photos" a JavaScript popup is suppose to come up but instead only a white line comes up i have searched oxwall forums and this is again down to mod_security if you go to http://www.thejanetdevlinfanclub.com/photo/viewlist/latest and sign in using "testuser" again and click upload photos you will be able to see the problem 
- Messages
- 3,819
- Reaction score
- 163
- Points
- 63
Hi Asasin,
The changes we made become part of our global modsecurity rules, so they should be in effect on all servers.
The changes we made become part of our global modsecurity rules, so they should be in effect on all servers.
- Messages
- 34,551
- Reaction score
- 204
- Points
- 63
Premium users have the ability to completely disable mod security on their account via cPanel even though we do discourage it.
For free hosting we have a customized web server setup that does not allow for the same cPanel functionality to disable mod security, we also decided it would not be a good idea to allow free users to disable it as we use it to not only protect against inbound malicious attacks but to prevent outbound abuse also. Unfortunately free hosting still gets a fair share of abusive signups so allowing these users to disable something that prevents their malicious actions wouldn't be in our best interest.
We are trying to make modifications to the rules in order to make everyone's scripts compatible with the rule sets. We just need ways to reproduce\see the issue so we can rewrite the rules accordingly. So if someone has an issue we need more information besides that it's not working.
Since implementing our new block lists and mod security rule sets we've seen a drastic reduction in compromised user sites and bot spam which means less suspended users, faster servers, and more time for us to work on other features. Across our network we're blocking thousands of bot requests per second which has on average increased our idle CPU time roughly 30%. As we continue to write rules and get better at blocking all these malicious hack attempts and bots I'm hoping we'll further increase those numbers.
For free hosting we have a customized web server setup that does not allow for the same cPanel functionality to disable mod security, we also decided it would not be a good idea to allow free users to disable it as we use it to not only protect against inbound malicious attacks but to prevent outbound abuse also. Unfortunately free hosting still gets a fair share of abusive signups so allowing these users to disable something that prevents their malicious actions wouldn't be in our best interest.
We are trying to make modifications to the rules in order to make everyone's scripts compatible with the rule sets. We just need ways to reproduce\see the issue so we can rewrite the rules accordingly. So if someone has an issue we need more information besides that it's not working.
Since implementing our new block lists and mod security rule sets we've seen a drastic reduction in compromised user sites and bot spam which means less suspended users, faster servers, and more time for us to work on other features. Across our network we're blocking thousands of bot requests per second which has on average increased our idle CPU time roughly 30%. As we continue to write rules and get better at blocking all these malicious hack attempts and bots I'm hoping we'll further increase those numbers.
foxzonex
New Member
- Messages
- 16
- Reaction score
- 1
- Points
- 3
it would help to know what to look for to report back. All i get is a
I did enable debugging for oxwall but its of no help when there such limitations on the mod security. which i understand completely the reasons behind it.
I might of went along the same paths to prevent abuse as well. But to help at this time is impossible. because this is all i can get and the cPanel error logs don't say anything related to my rvs directory. and all other research points to talk to the host for these errors.
Update
Suddenly shows this now on the error logs. dont know if it helps.
I did enable debugging for oxwall but its of no help when there such limitations on the mod security. which i understand completely the reasons behind it.
I might of went along the same paths to prevent abuse as well. But to help at this time is impossible. because this is all i can get and the cPanel error logs don't say anything related to my rvs directory. and all other research points to talk to the host for these errors.
Update
Suddenly shows this now on the error logs. dont know if it helps.
Last edited:
- Messages
- 34,551
- Reaction score
- 204
- Points
- 63
That error wouldn't be related to mod security, if mod sec blocks something it will show a 403 forbidden error.
It looks like you were running an install when the mod security error initially happened? Can start the install over? I think it's supposed to have stored some variables and mod security stopped it from doing so but it doesn't realize it.
It looks like you were running an install when the mod security error initially happened? Can start the install over? I think it's supposed to have stored some variables and mod security stopped it from doing so but it doesn't realize it.
- Status