The Joomla! Forum ™

hello guys,
I have still the same problem and it is very hard to get through somebody at the webcity support who knows about this issue and the only answer I get is that they are working on it. Has anyone other information what could cause this problem? I'm very disappointed about webcity support and without peebee10 i would not even know that the server scripts of my provider are the reason for the trouble? Has anyone new information or can recommend a proper provider; webcity doesn't even reply concrete questions...

Unfortunately I cant help as the problem was solved with the SecFilterEngine solution.

I have to say I have found webcity support to be the best I have come across! Had an issue last week which they solved within an hour, and sent me about three emails to update me on the process, and couldn't apologise enough! They have always been really quick to reply to emails. So I would find it really hard to recommend against them.

Are they just not replying at all? Are you putting enough pressure on them? Do they REALLY understand what the issue is?

Cheers
FiveD

hello fived!

Sorry, but my experience with webcity are not as good as yours. (Once I made an error while logging into the admin page and was blocked afterwards, I told them about it, that I had no access and no response when doing a ping, but it took them 5 hours to react on my emails and unblock me... )
Back to topic: I will install Joomla! completely new with fantasticoda this time. Maybe all my problems are results of my manual installation and webcity is not to blame at all (I hope so).
Thank you all for your input!
tanklo

Hi Bob, I too am with Webcity Australia and I was having the issue as well.

I have had success by adding the code:

########## Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue
SecFilterEngine Off
SecFilterScanPOST Off
########## End - Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue

to the htaccess.txt file and renaming to .htaccess as suggested by others.

I was also having the password issue you mentioned, however that went away when I set "enable ftp" to no.

I hope this helps you. Thanks to everyone who has helped me out.

The 403 Forbidden error is indeed generated by mod_security and it depends on how the sysadmin guys have configured it and how much restrictive rules they created.
In my case, it turned out that a particular filter rule on "txt" text was performed, so I deleted the string "txt" from the allowed extension textbox in global configuration ant it worked!

Nicole 2292 & danjg,

YOU GUYS ARE LEGENDS, 3 months messing around with Webcity who have had no idea how to solve this issue, and you have solved it for me.

Thanks to all have offered help on this, it has been very much appreciated.

Cheers Bob

posting.php?mode=reply&f=431&t=265427#
posting.php?mode=reply&f=431&t=265427#
posting.php?mode=reply&f=431&t=265427#

This thing with webcity is out of its tree!

I have experimented with php.ini and it did nothing to resolve the saving of data into the config file

Ultimately this works


########## Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue
SecFilterEngine Off
SecFilterScanPOST Off
########## End - Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue


But I wonder also if its going to cause a security risk? joomla has updated 2 times since this began and no word yet from the devs or even a fix so I am concerned about this.

Hi, Thanks for the fix...after a proper search I found it's also possible to make it work like this:

<IfModule mod_security.c>
SecFilterEngine off
</IfModule>

I rather use this option without the second line... just to minimize whatever risk this options may cause...

But thanks for the help! I wouldn't have made it work without you...

I used this to fix a Global Configuration saving error, and it worked.

I am using Joomla 1.5.4 and was gettin a "406 Not Acceptable" error. "An appropriate representation of the requested resource /administrator/index.php could not be found on this server." I could not save, apply or close the Global Configuration. Seemed to be the only problem, but frustrating.

But the big question is how much have I reduced the security? I was recently hit by some hackers who deleted everything off my server, and posted their own page. So the possible lack of security is verrry important to me.

I posted the SecFilter solution on this thread back on 26th Feb and questioned the vulnerability then.

It doesn't seem to matter how many people ask the same question about vulnerability, which there have been a few, no one from Joomla is answering! Where have all the Joomla SuperHeroes gone? Is anybody out there, ie a moderator watching this thread at all, is there an alternative safe solution and we may never know, maybe it isn't vulnerable at all, perhaps it is in hand and being looked at, it could even be the subject is being avoided?

Ho-hum, waiting to exhale

Cheers FiveD

Well I found out this morning that I can used either:



or



and they both solve the "Global Configuration" save issue for me. Makes me feel a little better about my sites security. Now my question is which is preferable?

I have tried to resolve this issue for awhile... So I have resolved it the God's help and mi amigos from this forum.. Thanks...

Problem:

1. Unable to upload pictures into media manager.
1A. Edited the .htaccess file. Had several .htaccess files so I also had to edit more than one.

########## Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue
SecFilterEngine Off
SecFilterScanPOST Off
########## End - Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue

2. Unable to JFTP Connect and write to global configuration file.
2A. Simply changing "localhost" or "127.0.0.1" to my actual domain name http://mydomainname.com
then changed the configuration.php under Server Settings check or change the value for $ftp_enable, to:

var $ftp_enable = “0”;


My setting was set to "1", just changed it to "0" and B I N G O was his namo!

Thanks and God Bless!!! Peace Sucka

I'm having the same issues. I tried the above suggestions and it took my whole site down. Got an "internal server error" so I had to revert all the changes. As far as changing security settings, I don't think that's the way to go.

How is this not a bigger issue with developers? It seems to be affecting a lot of people and I haven't found a clear solution or a patch.

I had to stop using virtuemart for my store and start paying someone to host my store page because I have been unable to fix this login error and the Joomla developers seem to have no answers. People will currently be unable to register on my site as the login always gives the "forbidden error"

_________________
http://www.2coolstuff.com

Just to add some currency to this thread. I am using J1.5.4 (but with the reset patch) and I suddenly found myself unable to save a normal article. I am hosted with asmallorange.com and I imagine they changed some setting on the shared machine.

The .htaccess tip above worked for me.

I have disabled the upload flash option and now I can upload without the error 403

In which directory the flash uploader write the temporal files?

_________________
From the code to the reality!

Just wanted to say that I had similar problems on a Webcity hosted site and pasting the

########## Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue
SecFilterEngine Off
SecFilterScanPOST Off
########## End - Attempt to solve 'Global Configuration' save issue, FTP layer issue, Media Upload issue

into an htaccess file also fixed it for me...

I had the same problem on Joomla 1.5.8, couldn't log as admin.
It suck that Dev's did nothing since joomla 1.5.1, i guess that's when problem first occurred.

Anyway, this htaccess "hack" works great

Have you checked the write permissions in the tmp directory (chmod 777)??

_________________
From the code to the reality!

hello

I have similar problem:
Authors, Editors, Publishers, Managers can't submit articles in frontend. But system allow to upload pictures to server before you press 'submit' article. After pres submit you get:
403 - Access Denied. You do not have the permission to add articles in this section.
Only Administrators can submit articles in frontend.

At the begining after I instaled Joomla 1.5.8 everything was OK. Later I instaled some mods: VirtueMart, JoomGallery (registered users can create sub-galleries and upload pictures).

added code to .htaccess not helped

anybody can help me?

thanks

u my friend are a star! thanks for the fix!

For anyone on webcity getting this issue, one thing I have noticed is that it happens mostly on the version 10 installs of cPanel - if your account was set up more than a couple of years ago, you are probably on cPanel 10.

In addition, while the .htaccess hack does fix the issue, if your joomla install is in a subdirectory, changing the .htaccess file in that subdirectory does not always fix the issue - I found I needed to add the hack to .htaccess in the /public_html/ directory itself - ie, it seems to need to be sitewide.

Hope this helps anyone struggling with this issue.

iget error 403 when trying to submit any article from front end as an author
when applying this hack to .htaccess the whole site gives internal server error

I also get this error :
Forbidden



I also try that .htaccess trick did not work then I contacted the hosting support team and they say you have overloaded the server and it will come back after 24 hours, this means I have to wait 24 hours for using the /administrator page

Have we found a solution yet? htaccess trick just gives an error to my entire site.
I have no problems other than an uneditable Global Settings.

Hi,

I've started using Joomla on a website that wants CMS. I ran into this issue this week and the .htaccess fix worked for me:



I'm not sure what security implications this has?

Any help or advice appreciated.

Thanks
Nelson

HELP! For those of you who tried the hta hack and it took down your whole site - what did you do to bring your site back up?

I reverted the hta back to the txt file, still can't get the site up.

I had to contact the hosting company, they had just removed those lines. It started to work after they removed those lines.

I don't know what was causing the issue but those lines of code don't seem to be very good and it started working ok again once those lines were removed. It may be some settings in the control panel that take a while to change... So maybe just be patient once you do any changes.

I take back what I said previously and I wouldn't recommend these lines of code to anyone.

Good luck I hope the hosting company is able to help you.

Cheers

Dunno if this helps, but we found that our apache's mod_security2 was interfering with some of the php scripting. Specifically, modsecurity_crs_41_phpids_filters.conf core ruleset.

Hi all,

I have had this site live for a month now, I wanted to upload an image and I could not do so.
I tried changing the write permission settings on various file directories to see if this would enable me to upload images to the media manager.

This resulted in the site now displaying a 403 forbidden error when I add the adminisitrator after the domain name! The site is live and all working well apart from the back end which I cannot access now, where I could earlier this morning!!

I have followed this thread through where I tried to change the .htaccess file by adding the 2 lines of code above but I got an error message on my server, see below.

Error: Unable to edit file /httpdocs/.htaccess.txt: filemng failed: cp: cannot create regular file `/var/www/vhosts/derektaylorfencing.co.uk/httpdocs/.htaccess.txt': Permission denied
filemng: Error occurred during /bin/cp command.

This should have been a 10 minute job which has since turned into a full morning 4 hour stint, as usual it is either write or file permission issues that take up the majority of my time, frustrating the life out of me......

http://www.derektaylorfencing.co.uk
http://www.derektaylorfencing.co.uk/administrator

Thanks in advance for any help and assistance I may receive!

Alex

P.s I know that this is an old post!