new users redirected to index.php - 403 error

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
Rockstar2
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Tue May 26, 2009 12:57 am

new users redirected to index.php - 403 error

Post by Rockstar2 » Sun Aug 16, 2009 10:43 pm

After my users register they are directed to the site index. http://www.site.com/index.php which shows this error, how can this be fixed:

Code: Select all

403 - You are not authorised to view this resource.

You may not be able to visit this page because of:

   1. an out-of-date bookmark/favourite
   2. a search engine that has an out-of-date listing for this site
   3. a mistyped address
   4. you have no access to this page
   5. The requested resource was not found.
   6. An error has occurred while processing your request.

Please try one of the following pages:

    * Home Page

If difficulties persist, please contact the System Administrator of this site.

You are not authorised to view this resource.


my site htaccess file:

Code: Select all

rewriteengine on

##
# @version $Id: htaccess.txt 10492 2008-07-02 06:38:28Z ircmaxell $
# @package Joomla
# @copyright Copyright (C) 2005 - 2008 Open Source Matters. All rights reserved.
# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
# Joomla! is Free Software
##


#####################################################
#  READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations.  It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file.  If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's.  If they work,
# it has been set by your server administrator and you do not need it set here.
#
#####################################################

##  Can be commented out if causes errors, see notes above.
Options +FollowSymLinks

#
#  mod_rewrite in use

RewriteEngine On

########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits

#  Uncomment following line if your webserver's URL
#  is not directly related to physical file paths.
#  Update Your Joomla! Directory (just / for root)

# RewriteBase /


########## Begin - Joomla! core SEF Section
#
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} (/|\.php|\.html|\.htm|\.feed|\.pdf|\.raw|/[^.]*)$  [NC]
RewriteRule (.*) index.php
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
#
########## End - Joomla! core SEF Section

# start .htaccess file - change /YOUR-PHOTOPLOG_DIR/ to your photoplog directory
RewriteEngine on
RewriteBase /
RewriteRule /gallery/file_([0-9]+)\.jpg$ /gallery/file.php?n=$1 [L]
# end .htaccess file



User avatar
mandville
Joomla! Master
Joomla! Master
Posts: 15152
Joined: Mon Mar 20, 2006 1:56 am
Location: The Girly Side of Joomla in Sussex

Re: new users redirected to index.php - 403 error

Post by mandville » Sun Aug 16, 2009 11:08 pm

ok,
not quite a security post,
whats that bit at the end of your htaccess for?
what happens when you remove that?
use the forum post tool
what folder is joomla located in?
HU2HY- Poor questions = Poor answer
Un requested Help PM's will be reported, added to the foe list and possibly just deleted
{VEL Team Leader}{TM Auditor }{ Showcase & Security forums Moderator}

Rockstar2
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Tue May 26, 2009 12:57 am

Re: new users redirected to index.php - 403 error

Post by Rockstar2 » Mon Aug 17, 2009 1:49 pm

that was supposed to be for my photo gallery in my vbulletin forum in site.com/discussions.

Not sure if that causes error...

User avatar
mandville
Joomla! Master
Joomla! Master
Posts: 15152
Joined: Mon Mar 20, 2006 1:56 am
Location: The Girly Side of Joomla in Sussex

Re: new users redirected to index.php - 403 error

Post by mandville » Mon Aug 17, 2009 4:01 pm

Code: Select all

rewriteengine on
please follow naming conventions

Code: Select all

RewriteEngine On
also if you hide the bit at the bottom of your htaccess does the problem go away?

as suggested
what happens when you remove that?
use the forum post tool
HU2HY- Poor questions = Poor answer
Un requested Help PM's will be reported, added to the foe list and possibly just deleted
{VEL Team Leader}{TM Auditor }{ Showcase & Security forums Moderator}


Locked

Return to “Security in Joomla! 1.5”