The MU forums have moved to WordPress.org

403 - Forbidden errors when edit blog options (9 posts)

  1. WDuluoz
    Member
    Posted 18 years ago #

    I have been working on this for the past 2 days.
    I have read through most of the forums and trac.

    I did a clean install numerous times. I have tried different versions of the .htaccess file (blank, removing base, one persons big long one.)

    I have it installed in the root directory on an apache / linux machine. Mod-rewrite enabled, symlinks allowed.
    I have tried both version 1.0 and the nightly build 2007-02-24.

    As far as virtual host, I dont really know. I would assume so, since I have had multiple domains running through one IP address.

    Everything works. I can post, edit post, edit "most" pages, add blogs, remove blogs (though it keeps asking me to confirm), and add/remove users.

    I ripped the sight apart at least 7 times.

    There are only two things which keep this from working perfectly.

    1)
    When I go to edit blog options under Site Admin>>Blogs>>Edit, I can see everything but when I click update options.
    I get a 403 - you are forbidden to access wpmu_edit.php
    Now I can go to this file directly without problems.

    During one install attempt, I put only partial information back in the options for each blog. This meant that the list of options was really small about 10-15. I was able to update options without problem, so it seems to be only a problem when all the options are available and are being submitted.

    2)
    This one is stranger than that. I have pages and some pages have parents and some of the parents have parents.
    If I save the edits of some of my pages, I get an Internal Server Error when I click publish.
    This seems to only happen on my larger pages (more detailed) and only on the few that are the lowest in the hierarchy.

    Has anyone come across either of these two errors?

    Other than that, the site is running.

    I have migrated everything from my previous phpbb / wordpress integration over nicely(Access is a life saver because you can set up the relationships then output only the information you need).
    I scraped together enough code to integrate wordpress comments in phpbb in my plugin wphpbb, so I am comfortable with going through Wordpress's code.

    I appreciate all the help I can get because this is annoying.

    WDuluoz

  2. lunabyte
    Member
    Posted 18 years ago #

    403 errors are permission errors.

    Either because that file isn't 755, or the owner/group isn't right.

  3. drmike
    Member
    Posted 18 years ago #

    Check the webserver's error logs as well for anything in there.

  4. WDuluoz
    Member
    Posted 18 years ago #

    mod_security: Access denied with code 403. Pattern match "((alter|create|drop)[[:space:]]+(column|database|procedure|table)|delete[[:space:]]+from|update.+set.+=)" at POST_PAYLOAD [id "300015"][rev "1"] [msg "Generic SQL injection protection"] [severity "CRITICAL"] [hostname "happypoet.com"] [uri "/wp-admin/wpmu-edit.php?action=updateblog"]

    This is the error I get when I try to update the blog options.
    Im trying to understand exactly what is happening. It looks like mod security is stopping the routine.

  5. lunabyte
    Member
    Posted 18 years ago #

    I run mod_security, and don't have that issue.

    Talk to your host.

  6. drmike
    Member
    Posted 18 years ago #

    Agreed. Looks like their filters are set too high. It's probably complaining about the '?' in teh url. That's a guess though.

  7. WDuluoz
    Member
    Posted 18 years ago #

    I want to thank both of you for the help. The host told me what to add to my .htaccess to disable the mod_security restriction that was causing the problem.

    Thanks again,

    WDuluoz

  8. randyhoyt
    Member
    Posted 16 years ago #

    I am having this same problem. Would someone mind posting the code necessary for disabling mod_security? Does the go in the .htaccess file at the root of the site, or do I need to create a new one in the wp-admin folder?

    Thanks,
    ~randy

  9. VentureMaker
    Member
    Posted 16 years ago #

    Better check with your host how to disable mod_security.
    Many hosts have this as option in control panel.

About this Topic

  • Started 18 years ago by WDuluoz
  • Latest reply from VentureMaker