403 Forbidden

[spence979]

Hi,

I am getting Forbidden error when i try and pull information from 2/3 web services.

Forbidden
You don't have permission to access /KB2/evedev-kb-R4.2.6.0/ on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

This happens when i try and pull information from "https://zkillboard.com/api/corporationID/583448794" and "http://eve-kill.net/?a=idfeed". However, i have a similar function that pulls information from "api.eveonline.com" and it works completely fine. I was able to pull info from zkillboard and eve-kill in December but within the last week/2 weeks i have been getting the Forbidden error message.

I haven't changed anything lately that interacts with the above functions. Any thoughts as to why this is now happening?

Thanks
Spence

 

[Dead-i]

Hi Spence,

It looks like there is no hosting account associated with your forum account. Please could you link your hosting account by going to "Support" in the top right of your cPanel, or alternatively provide me with your cPanel username.

Thank you,

 

[spence979]

ahh sorry, cPanel username is modrox10.

 

[leafypiggy]

Hi,

It appears that your request is being blocked due to a URL being contained within the POST/GET paramaters. I'm looking into this with our Management team to see if there's anything we can do to relax this rule a bit.

 

[spence979]

Cool, Thanks

 

[leafypiggy]

Unfortunately, due to how the rule is created, we are unable to support the functionality of how your site is requesting the API data with our modsecurity implementation.

You will need to rework your code so that the URL is not passed as a parameter.

 

[caftpx10]

I've tested this using the GET and POST request on my site and it returned a 403, as you said.
This can be an issue when it comes to someone posting a URL for it to be up on the site for others to see, converting it to something else or some other use.

Maybe there should be an option for the webmaster to enable or disabled that rule?