Grey Matter Forums
« Forbidden »

Welcome Guest. Please Login or Register.
Jun 18, 2013, 6:18pm

[Home] [New Topics] [Help] [Search] [Login] [Register]


Greymatter: Free Personal Blogging Software

About Greymatter (including System Requirements)

Greymatter on FreshMeat

Download current version from:

News: Greymatter 1.8.2 is released! Read the announcement.

Got a minute? We want to know what's your preferred site navigation?

Please read the security announcement regarding author passwords.

Next Greymatter release will be 1.8.3


Grey Matter Forums :: Support :: Trouble Shooting :: Forbidden
Page 1 of 2 » Jump to page   Go    [Search This Thread] [Share Topic] [Print]
AuthorTopic: Forbidden (Read 3,491 times)
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Forbidden
« Thread Started on Jun 4, 2007, 9:30pm »
I've used Greymatter several times, and I've always been successful. At this point, I've memorized what to CHMOD too. Hah. Anyhow, this problem that I'm presenting is occuring with every version of Greymatter. From 1.3 to 1.3.1 to 1.7.1.2 blah blah etc. Oh, I've got Windows XP

Okay.... I do as the instructions read. I go on to my gm.cgi file, log in as Alice, everything works out fine. I do my configuration, do the diagnosis... everything is PERFECT. Then, I go to templates. I try to change the template or even click "Back to main menu" while in templates, and I get this error:

Forbidden
You don't have permission to access /cgi-bin/gm.cgi on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.


--------------------------------------------------------------------------------

Apache/1.3.36 Server at jade.strawberry-gashes.net Port 80


I am truly DUMBFOUNDED by what the hell is going on. I've never experienced such thing. And in all honesty, if this has something to do with PERL, I'm lost... 'cause I have no clue what that is and I've never had to deal with that before, so why now?

My index.html works. But if I add an entry, that same error shows up.

Please help!

If you want to check things out yourself feel free to:

http://www.jade.strawberry-gashes.net/cgi-bin/gm.cgi

User: Alice
Pass: wonderland

Please let me know what you do etc.

« Last Edit: Jun 4, 2007, 9:37pm by jade »Link to Post - Back to Top  IP: Logged
jesper
New Member
*
member is offline

[avatar]


[homepage]

Joined: May 2007
Gender: Male
Posts: 35
Location: Sweden.
Karma: 5
Re: Forbidden
« Reply #1 on Jun 5, 2007, 4:19pm »
Hmm.. Odd one.
First impression would be some setting with scriptalias being wrong, but it shouldnt even allow you to login if that was the case.

What does you apache error log say? And also, how does your ScriptAlias line look like?

I noticed your Website Log Path seems wrong, Place it outside of /cgi-bin/, see if that helps.

EDIT:
Since you posted login info and invited, i'll play around a little to see if i can spot anything.

EDIT2:
Well.. I changed your 'Website Log Path' to make the home link work.. thats about all the changes i did..

GM needs to create a file when rebuilding the site/changing the templates. Im wondering if the error is because the httpd user dont have write access in the relevant directory, thus cant create this file. I think that could trigger this error msg.

Any info from your apache error log would be very helpful.
« Last Edit: Jun 5, 2007, 4:53pm by jesper »Link to Post - Back to Top  IP: Logged
coldstone
Global Moderator
*****
member is offline

[avatar]


[homepage]

Joined: Aug 2006
Posts: 816
Karma: 18
Re: Forbidden
« Reply #2 on Jun 5, 2007, 4:48pm »
That is really, really weird. Not to pass the buck, but I would contact your web server administrator or web host and ask them about it.

My only guess so far, without any info, would be that maybe their apache has a request size limit. Because basically, all you templates are on your page (most of them are hidden), so when you click any of those buttons, you are sending a the form to the server with all that data, and if there is a limit, maybe you are hitting it.

But why it would generate a Forbidden response, unless its an anti-ddos measure? Anyone?
Link to Post - Back to Top  IP: Logged
jesper
New Member
*
member is offline

[avatar]


[homepage]

Joined: May 2007
Gender: Male
Posts: 35
Location: Sweden.
Karma: 5
Re: Forbidden
« Reply #3 on Jun 5, 2007, 5:31pm »
Good point about the LimitRequestLine, since the error messages are customizable, i guess a sysadmin could use that message for any reason he sees fit. Not a very helpful move from a error tracking perspective though. Should slap the sysadmin for that. :P (If thats the case).
Link to Post - Back to Top  IP: Logged
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Re: Forbidden
« Reply #4 on Jun 5, 2007, 6:10pm »
On the subject of Apaches, I asked my host and she sent me an error log with nothing signicant except 404 errors as a result of me not uploading my emoticons, which I did now, just for the hell of it.

This is what she sent me:

http://jade.strawberry-gashes.net/top21.txt


According to her, she was unable to find any limit that I might have "hit."
« Last Edit: Jun 5, 2007, 8:48pm by jade »Link to Post - Back to Top  IP: Logged
jesper
New Member
*
member is offline

[avatar]


[homepage]

Joined: May 2007
Gender: Male
Posts: 35
Location: Sweden.
Karma: 5
Re: Forbidden
« Reply #5 on Jun 5, 2007, 8:38pm »
That link is dead, can you fix it please.
Link to Post - Back to Top  IP: Logged
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Re: Forbidden
« Reply #6 on Jun 5, 2007, 8:54pm »
http://www.jade.strawberry-gashes.net/top21.txt

Just in case it doesn't work for whatever reason...

http://geocities.com/checking12345/jade_error_log.txt
Link to Post - Back to Top  IP: Logged
jesper
New Member
*
member is offline

[avatar]


[homepage]

Joined: May 2007
Gender: Male
Posts: 35
Location: Sweden.
Karma: 5
Re: Forbidden
« Reply #7 on Jun 5, 2007, 9:30pm »
Here we go:

[Tue Jun 5 17:41:44 2007] [error] [client 85.226.148.xx] attempt to invoke directory as script: public_html/jade/cgi-bin <- Thats me going back to main menu from templates.

I looked at apache wiki and found this:

Code:
Attempt to invoke directory as script

This occurs when Apache is configured with ScriptAlias or SetHandler and a request is made for a directory path. The problem is that under those circumstances, all resources under a certain path are considered to be executable.

To get around this and allow DirectoryIndex to work again, use AddHandler with Options ExecCGI, or SetHandler in a <Files> stanza.

For example, replace this:

ScriptAlias /cgi-bin /var/www/cgi-bin

with this:

Alias /cgi-bin /var/www/cgi-bin
<Directory /var/www/cgi-bin>
AddHandler cgi-script cgi pl
Options ExecCGI
</Directory>
Link to Post - Back to Top  IP: Logged
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Re: Forbidden
« Reply #8 on Jun 6, 2007, 4:46pm »
Sorry, I don't follow. I'm not sure I understand what the problem is, or how to solve it.
Link to Post - Back to Top  IP: Logged
jesper
New Member
*
member is offline

[avatar]


[homepage]

Joined: May 2007
Gender: Male
Posts: 35
Location: Sweden.
Karma: 5
Re: Forbidden
« Reply #9 on Jun 6, 2007, 9:54pm »
It seems you will have to replace your ScriptAlias in the httpd.conf with an Alias and config the directory settings according to the settings above.

You will need to ask your web host to do this.
Link to Post - Back to Top  IP: Logged
coldstone
Global Moderator
*****
member is offline

[avatar]


[homepage]

Joined: Aug 2006
Posts: 816
Karma: 18
Re: Forbidden
« Reply #10 on Jun 7, 2007, 9:31am »
I think I found the issue. I found that if you embed a form on the templates page (I used Firebug):
Code:
<form action="gm.cgi" method="post"><input type="submit" name="thomas" value="Return To Main Menu"/>
<input type="hidden" name="authorname" value="Alice"/>
<input type="hidden" name="authorpassword" value="wonderland"/>
<INPUT TYPE=HIDDEN NAME="newcommentsformtemplate" VALUE="
<script
">
</form>

You will get the 'forbidden' message.

Your webhost is blocking execution of any script that receives the start of a script html statement. They are probably trying to block cross-site scripting attacks. Which this isn't. That is lame.

So, long story short, no javascript for your site until your webhost changes how its webserver is scanning for that tag (i.e. no emoticons will be inserted when clicking the smilies). I did remove the javascript from the {{cookiescode}}, {{smartemoticonscode}}, and {{entrycommentsform}} Templates and was able to save and navigate.

You can get the javascript from the default templates when your host modifies its server configuration. However, if they think thats the best way to secure their stuff, they may not be willing to change. But try asking, since you are the client, they should listen.
« Last Edit: Jun 7, 2007, 9:33am by coldstone »Link to Post - Back to Top  IP: Logged
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Re: Forbidden
« Reply #11 on Jun 7, 2007, 4:16pm »
Oh wow, thank you so much. That's really stupid... no java scripts. But I wasn't planning on using the emoticons anyways, so not that big of a loss. Until things get settled, at least I can work on things. Thanks for your help, the both of you... so much. :)
Link to Post - Back to Top  IP: Logged
jade
New Member
*
member is offline




[homepage]

Joined: Jun 2007
Posts: 10
Location: USA
Karma: 0
Re: Forbidden
« Reply #12 on Jun 9, 2007, 4:50pm »
Oh and just for your reference. After sending messages to the actual webhosting company (Surpass), this is what I got from it. And after following what they said, the javascripts work. Maybe this will help you guys, if you encounter a similar problem. Again, thanks for your help though. :)







The issue is fixed. Now the site http://strawberry-gashes.net/jade is loading fine.
Please do verify it from your side also refer the attached screen shot.

The permission of some of the php files were incorrect that had caused the issue.
We have corrected it. The server is phpsuexec enabled server. In phpsuexec servers
the directories should have 755 permission and php files should have 644 permission.
Otherwise it will throw errors.

If you still having problems please get back to us with the EXACT steps/URLs
to recreate the scenario at our end . Also include any needed error details.
Dipu
Unix Admin
SurpassHosting.com
Link to Post - Back to Top  IP: Logged
coldstone
Global Moderator
*****
member is offline

[avatar]


[homepage]

Joined: Aug 2006
Posts: 816
Karma: 18
Re: Forbidden
« Reply #13 on Jun 12, 2007, 11:24am »
Did you try putting the javascript back in? I am just curious if it really works, because no php files were being modified, so as far as I can tell that shouldn't impact Greymatter.

Thanks for the info though.
Link to Post - Back to Top  IP: Logged
dani
New Member
*
member is offline

[avatar]

amazing


[homepage]

Joined: Aug 2007
Gender: Female
Posts: 2
Karma: 0
Re: Forbidden
« Reply #14 on Aug 11, 2007, 12:11pm »
I get this same error when I try to edit and save an entry.
Link to Post - Back to Top  IP: Logged
dani
Page 1 of 2 » Jump to page   Go    [Search This Thread] [Share Topic] [Print]

Click Here To Make This Board Ad-Free


This Board Hosted For FREE By ProBoards
Get Your Own Free Message Boards & Free Forums!
Terms of Service | Privacy Policy | Notice | FTC Disclosure | Report Abuse | Mobile