jade
New Member
Posts: 10
|
Post by jade on Jun 4, 2007 21:30:44 GMT -5
I've used Greymatter several times, and I've always been successful. At this point, I've memorized what to CHMOD too. Hah. Anyhow, this problem that I'm presenting is occuring with every version of Greymatter. From 1.3 to 1.3.1 to 1.7.1.2 blah blah etc. Oh, I've got Windows XP Okay.... I do as the instructions read. I go on to my gm.cgi file, log in as Alice, everything works out fine. I do my configuration, do the diagnosis... everything is PERFECT. Then, I go to templates. I try to change the template or even click "Back to main menu" while in templates, and I get this error: Forbidden You don't have permission to access /cgi-bin/gm.cgi on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
--------------------------------------------------------------------------------
Apache/1.3.36 Server at jade.strawberry-gashes.net Port 80I am truly DUMBFOUNDED by what the hell is going on. I've never experienced such thing. And in all honesty, if this has something to do with PERL, I'm lost... 'cause I have no clue what that is and I've never had to deal with that before, so why now? My index.html works. But if I add an entry, that same error shows up. Please help! If you want to check things out yourself feel free to: www.jade.strawberry-gashes.net/cgi-bin/gm.cgiUser: Alice Pass: wonderland Please let me know what you do etc.
|
|
|
Post by jesper on Jun 5, 2007 16:19:07 GMT -5
Hmm.. Odd one. First impression would be some setting with scriptalias being wrong, but it shouldnt even allow you to login if that was the case.
What does you apache error log say? And also, how does your ScriptAlias line look like?
I noticed your Website Log Path seems wrong, Place it outside of /cgi-bin/, see if that helps.
EDIT: Since you posted login info and invited, i'll play around a little to see if i can spot anything.
EDIT2: Well.. I changed your 'Website Log Path' to make the home link work.. thats about all the changes i did..
GM needs to create a file when rebuilding the site/changing the templates. Im wondering if the error is because the httpd user dont have write access in the relevant directory, thus cant create this file. I think that could trigger this error msg.
Any info from your apache error log would be very helpful.
|
|
|
Post by coldstone on Jun 5, 2007 16:48:39 GMT -5
That is really, really weird. Not to pass the buck, but I would contact your web server administrator or web host and ask them about it.
My only guess so far, without any info, would be that maybe their apache has a request size limit. Because basically, all you templates are on your page (most of them are hidden), so when you click any of those buttons, you are sending a the form to the server with all that data, and if there is a limit, maybe you are hitting it.
But why it would generate a Forbidden response, unless its an anti-ddos measure? Anyone?
|
|
|
Post by jesper on Jun 5, 2007 17:31:11 GMT -5
Good point about the LimitRequestLine, since the error messages are customizable, i guess a sysadmin could use that message for any reason he sees fit. Not a very helpful move from a error tracking perspective though. Should slap the sysadmin for that. (If thats the case).
|
|
jade
New Member
Posts: 10
|
Post by jade on Jun 5, 2007 18:10:16 GMT -5
On the subject of Apaches, I asked my host and she sent me an error log with nothing signicant except 404 errors as a result of me not uploading my emoticons, which I did now, just for the hell of it. This is what she sent me: jade.strawberry-gashes.net/top21.txtAccording to her, she was unable to find any limit that I might have "hit."
|
|
|
Post by jesper on Jun 5, 2007 20:38:13 GMT -5
That link is dead, can you fix it please.
|
|
jade
New Member
Posts: 10
|
Post by jade on Jun 5, 2007 20:54:37 GMT -5
|
|
|
Post by jesper on Jun 5, 2007 21:30:03 GMT -5
Here we go:
[Tue Jun 5 17:41:44 2007] [error] [client 85.226.148.xx] attempt to invoke directory as script: public_html/jade/cgi-bin <- Thats me going back to main menu from templates.
I looked at apache wiki and found this:
Attempt to invoke directory as script
This occurs when Apache is configured with ScriptAlias or SetHandler and a request is made for a directory path. The problem is that under those circumstances, all resources under a certain path are considered to be executable.
To get around this and allow DirectoryIndex to work again, use AddHandler with Options ExecCGI, or SetHandler in a <Files> stanza.
For example, replace this:
ScriptAlias /cgi-bin /var/www/cgi-bin
with this:
Alias /cgi-bin /var/www/cgi-bin <Directory /var/www/cgi-bin> AddHandler cgi-script cgi pl Options ExecCGI </Directory>
|
|
jade
New Member
Posts: 10
|
Post by jade on Jun 6, 2007 16:46:49 GMT -5
Sorry, I don't follow. I'm not sure I understand what the problem is, or how to solve it.
|
|
|
Post by jesper on Jun 6, 2007 21:54:21 GMT -5
It seems you will have to replace your ScriptAlias in the httpd.conf with an Alias and config the directory settings according to the settings above.
You will need to ask your web host to do this.
|
|
|
Post by coldstone on Jun 7, 2007 9:31:11 GMT -5
I think I found the issue. I found that if you embed a form on the templates page (I used Firebug):
<form action="gm.cgi" method="post"><input type="submit" name="thomas" value="Return To Main Menu"/> <input type="hidden" name="authorname" value="Alice"/> <input type="hidden" name="authorpassword" value="wonderland"/> <INPUT TYPE=HIDDEN NAME="newcommentsformtemplate" VALUE=" <script "> </form> You will get the 'forbidden' message.
Your webhost is blocking execution of any script that receives the start of a script html statement. They are probably trying to block cross-site scripting attacks. Which this isn't. That is lame.
So, long story short, no javascript for your site until your webhost changes how its webserver is scanning for that tag (i.e. no emoticons will be inserted when clicking the smilies). I did remove the javascript from the {{cookiescode}}, {{smartemoticonscode}}, and {{entrycommentsform}} Templates and was able to save and navigate.
You can get the javascript from the default templates when your host modifies its server configuration. However, if they think thats the best way to secure their stuff, they may not be willing to change. But try asking, since you are the client, they should listen.
|
|
jade
New Member
Posts: 10
|
Post by jade on Jun 7, 2007 16:16:03 GMT -5
Oh wow, thank you so much. That's really stupid... no java scripts. But I wasn't planning on using the emoticons anyways, so not that big of a loss. Until things get settled, at least I can work on things. Thanks for your help, the both of you... so much.
|
|
jade
New Member
Posts: 10
|
Post by jade on Jun 9, 2007 16:50:35 GMT -5
Oh and just for your reference. After sending messages to the actual webhosting company (Surpass), this is what I got from it. And after following what they said, the javascripts work. Maybe this will help you guys, if you encounter a similar problem. Again, thanks for your help though. The issue is fixed. Now the site strawberry-gashes.net/jade is loading fine. Please do verify it from your side also refer the attached screen shot. The permission of some of the php files were incorrect that had caused the issue. We have corrected it. The server is phpsuexec enabled server. In phpsuexec servers the directories should have 755 permission and php files should have 644 permission. Otherwise it will throw errors. If you still having problems please get back to us with the EXACT steps/URLs to recreate the scenario at our end . Also include any needed error details. Dipu Unix Admin SurpassHosting.com
|
|
|
Post by coldstone on Jun 12, 2007 11:24:23 GMT -5
Did you try putting the javascript back in? I am just curious if it really works, because no php files were being modified, so as far as I can tell that shouldn't impact Greymatter.
Thanks for the info though.
|
|
dani
New Member
amazing
Posts: 2
|
Post by dani on Aug 11, 2007 12:11:00 GMT -5
I get this same error when I try to edit and save an entry.
|
|