Forbidden Error when installing in cPanel Topic is solved

[callweb]

Hi everyone,

There are several posts about this topic but unfortunately none has a real solution.

Since Joomla 4 came out i could never install Joomla 4. I insert admin and database credentials and when i submit i got to this Forbidden page. If i check the database, tables are created. If i use Akeeba or upgrade from Joomla 3 there are no problems.

Please mind that i'm uploading and extracting the zipped file via the File Administrator in cPanel.

I tried to disable PHP-FPM and also mod_security2 as suggested on another posts with no avail.

I have complete ROOT access to the VPS.

Here is my FPA report if you could help:

[09-Feb-2024 16:48:44 UTC] PHP Warning: Undefined array key

Joomla! Instance :: Joomla! 4.4.2-Stable (Pamoja) 9-January-2024
Joomla! Configured :: Not Found

Host Configuration :: OS: Linux | OS Version: 4.18.0-513.9.1.el8_9.x86_64 | Technology: x86_64 | Web Server: Apache | Encoding: gzip, deflate, br | System TMP Writable: Yes | Free Disk Space : 114.00 GiB |

PHP Configuration :: Version: 8.1.27 | PHP API: fpm-fcgi | Session Path Writable: Yes | Display Errors: 0 | Error Reporting: 32759 | Log Errors To: /home/academia/logs/academia_cml.pt.php.error.log | Last Known Error: 09th February 2024 17:00:02. | Register Globals: | Magic Quotes: | Safe Mode: | Allow url fopen: 1 | Open Base: | Uploads: 1 | Max. Upload Size: 1024M | Max. POST Size: 1024M | Max. Input Time: 3600 | Max. Execution Time: 3600 | Memory Limit: 1024M

Database Configuration :: Database Credentials incomplete or not available Nothing to display.
Missing credentials detected: Connection Type missing | Database Name missing |MySQL Host missing | Table Prefix missing | Database Username missing | Database Password missing |User Privileges : Unknown

PHP Extensions :: Core (8.1.27) | date (8.1.27) | libxml (8.1.27) | openssl (8.1.27) | pcre (8.1.27) | zlib (8.1.27) | filter (8.1.27) | hash (8.1.27) | json (8.1.27) | pcntl (8.1.27) | Reflection (8.1.27) | SPL (8.1.27) | session (8.1.27) | standard (8.1.27) | cgi-fcgi (8.1.27) | bcmath (8.1.27) | bz2 (8.1.27) | calendar (8.1.27) | ctype (8.1.27) | curl (8.1.27) | dom (20031129) | mbstring (8.1.27) | fileinfo (8.1.27) | ftp (8.1.27) | gd (8.1.27) | gettext (8.1.27) | gmp (8.1.27) | iconv (8.1.27) | imap (8.1.27) | intl (8.1.27) | exif (8.1.27) | mysqlnd (mysqlnd 8.1.27) | PDO (8.1.27) | Phar (8.1.27) | posix (8.1.27) | pspell (8.1.27) | SimpleXML (8.1.27) | snmp (8.1.27) | soap (8.1.27) | sockets (8.1.27) | sqlite3 (8.1.27) | tidy (8.1.27) | tokenizer (8.1.27) | xml (8.1.27) | xmlwriter (8.1.27) | xsl (8.1.27) | zip (1.19.5) | mysqli (8.1.27) | pdo_mysql (8.1.27) | pdo_sqlite (8.1.27) | xmlreader (8.1.27) | memcached (3.2.0) | imagick (3.7.0) | redis (6.0.2) | ionCube Loader (13.0.2) | Zend OPcache (8.1.27) | Zend Engine (4.1.27) |
Potential Missing Extensions ::
Disabled Functions :: exec | passthru | shell_exec | system |

Switch User Environment :: PHP CGI: Yes | Server SU: No | PHP SU: Yes | Potential Ownership Issues: No

Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (---) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) | administrator/logs/ (755) | api/ (755) |

Elevated Permissions (First 10) ::

Components :: Site ::
Core ::
3rd Party::

Components :: Admin ::
Core :: com_categories (4.0.0) ? | com_messages (4.0.0) ? | com_installer (4.0.0) ? | com_tags (4.0.0) ? | com_admin (4.0.0) ? | com_menus (4.0.0) ? | com_joomlaupdate (4.0.3) ? | com_checkin (4.0.0) ? | com_media (3.0.0) ? | com_config (4.0.0) ? | com_finder (4.0.0) ? | com_privacy (3.9.0) ? | com_guidedtours (4.3.0) ? | com_languages (4.0.0) ? | com_banners (4.0.0) ? | com_templates (4.0.0) ? | com_contenthistory (4.0.0) ? | com_wrapper (4.0.0) ? | com_ajax (4.0.0) ? | com_workflow (4.0.0) ? | com_mails (4.0.0) ? | com_fields (4.0.0) ? | com_newsfeeds (4.0.0) ? | com_postinstall (4.0.0) ? | com_plugins (4.0.0) ? | com_login (4.0.0) ? | com_cpanel (4.0.0) ? | com_associations (4.0.0) ? | com_modules (4.0.0) ? | com_content (4.0.0) ? | com_redirect (4.0.0) ? | com_users (4.0.0) ? | com_actionlogs (3.9.0) ? | com_cache (4.0.0) ? | com_scheduler (4.1.0) ? |
3rd Party::

Modules :: Site ::
Core :: mod_languages (3.5.0) ? | mod_random_image (3.0.0) ? | mod_related_items (3.0.0) ? | mod_articles_categories (3.0.0) ? | mod_tags_similar (3.1.0) ? | mod_login (3.0.0) ? | mod_banners (3.0.0) ? | mod_articles_news (3.0.0) ? | mod_syndicate (3.0.0) ? | mod_articles_category (3.0.0) ? | mod_users_latest (3.0.0) ? | mod_articles_archive (3.0.0) ? | mod_feed (3.0.0) ? | mod_tags_popular (3.1.0) ? | mod_wrapper (3.0.0) ? | mod_articles_popular (3.0.0) ? | mod_custom (3.0.0) ? | mod_menu (3.0.0) ? | mod_whosonline (3.0.0) ? | mod_stats (3.0.0) ? | mod_articles_latest (3.0.0) ? | mod_breadcrumbs (3.0.0) ? | mod_footer (3.0.0) ? | mod_finder (3.0.0) ? |
3rd Party::

Modules :: Admin ::
Core :: mod_latestactions (3.9.0) ? | mod_popular (3.0.0) ? | mod_quickicon (3.0.0) ? | mod_frontend (4.0.0) ? | mod_submenu (3.0.0) ? | mod_stats_admin (3.0.0) ? | mod_title (3.0.0) ? | mod_login (3.0.0) ? | mod_latest (3.0.0) ? | mod_post_installation_messages (4.0.0) ? | mod_messages (4.0.0) ? | mod_loginsupport (4.0.0) ? | mod_user (4.0.0) ? | mod_feed (3.0.0) ? | mod_guidedtours (4.3.0) ? | mod_custom (3.0.0) ? | mod_menu (3.0.0) ? | mod_privacy_dashboard (3.9.0) ? | mod_privacy_status (4.0.0) ? | mod_toolbar (3.0.0) ? | mod_version (3.0.0) ? | mod_logged (3.0.0) ? | mod_sampledata (3.8.0) ? | mod_multilangstatus (3.0.0) ? |
3rd Party::

Libraries ::
Core ::
3rd Party::

Plugins ::
Core :: plg_fields_media (3.7.0) ? | plg_fields_sql (3.7.0) ? | plg_fields_user (3.7.0) ? | plg_fields_calendar (3.7.0) ? | plg_fields_checkboxes (3.7.0) ? | plg_fields_color (3.7.0) ? | plg_fields_radio (3.7.0) ? | plg_fields_subform (4.0.0) ? | plg_fields_editor (3.7.0) ? | plg_fields_text (3.7.0) ? | plg_fields_imagelist (3.7.0) ? | plg_fields_usergrouplist (3.7.0) ? | plg_fields_integer (3.7.0) ? | plg_fields_list (3.7.0) ? | plg_fields_url (3.7.0) ? | plg_fields_textarea (3.7.0) ? | plg_user_contactcreator (3.0.0) ? | plg_user_joomla (3.0.0) ? | plg_user_profile (3.0.0) ? | plg_user_terms (3.9.0) ? | plg_user_token (3.9.0) ? | plg_quickicon_joomlaupdate (3.0.0) ? | plg_quickicon_extensionupdate (3.0.0) ? | plg_quickicon_privacycheck (3.9.0) ? | plg_quickicon_phpversioncheck (3.7.0) ? | plg_quickicon_downloadkey (4.0.0) ? | plg_quickicon_overridecheck (4.0.0) ? | plg_quickicon_eos (4.4.0) ? | plg_captcha_recaptcha (3.4.0) ? | plg_captcha_recaptcha_invisible (3.8) ? | plg_filesystem_local (4.0.0) ? | plg_actionlog_joomla (3.9.0) ? | plg_media-action_resize (4.0.0) ? | plg_media-action_crop (4.0.0) ? | plg_media-action_rotate (4.0.0) ? | plg_task_check_files (4.1) ? | plg_task_demo_tasks (4.1) ? | plg_task_site_status (4.1) ? | plg_task_requests (4.1) ? | plg_extension_namespacemap (4.0.0) ? | plg_extension_joomla (3.0.0) ? | plg_extension_finder (4.0.0) ? | plg_webservices_media (4.1.0) ? | plg_webservices_banners (4.0.0) ? | plg_webservices_redirect (4.0.0) ? | plg_webservices_tags (4.0.0) ? | plg_webservices_plugins (4.0.0) ? | plg_webservices_newsfeeds (4.0.0) ? | plg_webservices_languages (4.0.0) ? | plg_webservices_installer (4.0.0) ? | plg_webservices_modules (4.0.0) ? | plg_webservices_config (4.0.0) ? | plg_webservices_templates (4.0.0) ? | plg_webservices_messages (4.0.0) ? | plg_webservices_users (4.0.0) ? | plg_webservices_privacy (4.0.0) ? | plg_webservices_content (4.0.0) ? | plg_webservices_menus (4.0.0) ? | plg_editors-xtd_fields (3.7.0) ? | plg_editors-xtd_module (3.5.0) ? | plg_editors-xtd_readmore (3.0.0) ? | plg_editors-xtd_menu (3.7.0) ? | plg_editors-xtd_pagebreak (3.0.0) ? | plg_editors-xtd_image (3.0.0) ? | plg_editors-xtd_article (3.0.0) ? | plg_system_fields (3.7.0) ? | plg_system_actionlogs (3.9.0) ? | plg_system_stats (3.5.0) ? | plg_system_skipto (4.0.0) ? | plg_system_privacyconsent (3.9.0) ? | plg_system_redirect (3.0.0) ? | plg_system_updatenotification (3.5.0) ? | plg_system_sef (3.0.0) ? | plg_system_logout (3.0.0) ? | plg_system_log (3.0.0) ? | plg_system_highlight (3.0.0) ? | plg_system_languagecode (3.0.0) ? | plg_system_jooa11y (4.2.0) ? | plg_system_accessibility (4.0.0) ? | plg_system_logrotation (3.9.0) ? | plg_system_schedulerunner (4.1) ? | plg_system_remember (3.0.0) ? | plg_system_sessiongc (3.8.6) ? | plg_system_webauthn (4.0.0) ? | plg_system_shortcut (4.2.0) ? | plg_system_cache (3.0.0) ? | plg_system_debug (3.0.0) ? | plg_system_task_notification (4.1) ? | plg_system_guidedtours (4.3.0) ? | plg_system_languagefilter (3.0.0) ? | plg_system_httpheaders (4.0.0) ? | plg_behaviour_compat (4.4.0) ? | plg_behaviour_versionable (4.0.0) ? | plg_behaviour_taggable (4.0.0) ? | plg_installer_webinstaller (4.0.0) ? | plg_installer_override (4.0.0) ? | plg_installer_folderinstaller (3.6.0) ? | plg_installer_urlinstaller (3.6.0) ? | plg_installer_packageinstaller (3.6.0) ? | plg_finder_tags (3.0.0) ? | plg_finder_contacts (3.0.0) ? | plg_finder_newsfeeds (3.0.0) ? | plg_finder_categories (3.0.0) ? | plg_finder_content (3.0.0) ? | plg_multifactorauth_email (4.2.0) ? | plg_multifactorauth_totp (3.2.0) ? | plg_multifactorauth_fixed (4.2.0) ? | plg_multifactorauth_webauthn (4.2.0) ? | plg_multifactorauth_yubikey (3.2.0) ? | plg_workflow_notification (4.0.0) ? | plg_workflow_featuring (4.0.0) ? | plg_workflow_publishing (4.0.0) ? | plg_api-authentication_token (4.0.0) ? | plg_api-authentication_basic (4.0.0) ? | plg_privacy_actionlogs (3.9.0) ? | plg_privacy_user (3.9.0) ? | plg_privacy_message (3.9.0) ? | plg_privacy_consents (3.9.0) ? | plg_privacy_content (3.9.0) ? | plg_content_fields (3.7.0) ? | plg_content_joomla (3.0.0) ? | plg_content_pagebreak (3.0.0) ? | plg_content_loadmodule (3.0.0) ? | plg_content_vote (3.0.0) ? | plg_content_finder (3.0.0) ? | plg_content_confirmconsent (3.9.0) ? | plg_content_pagenavigation (3.0.0) ? | plg_content_emailcloak (3.0.0) ? | plg_authentication_joomla (3.0.0) ? | plg_authentication_ldap (3.0.0) ? | plg_authentication_cookie (3.0.0) ? | plg_sampledata_multilang (4.0.0) ? |
3rd Party:: plg_editors_tinymce (5.10.9) ? | plg_editors_codemirror (5.65.15) ? |

Templates :: Site :: cassiopeia (1.0) ? |
Templates :: Admin :: atum (1.0) ? |

Thanks

[Webdongle]

So the error occurs when the installation script tries to write the configuration.php? That normally happens when Joomla does not have the correct Ownership. Am not sure how the installer in the jpa backup handles the configuration.php.

You used the file manager in the Host's cp to upload and unpack the Joomla zip, yes? Then Joomla should have Ownership.

Did you set up the server from scratch or did the Host set it up?

Could 'Disabled Functions :: exec | passthru | shell_exec | system |' be part of the problem?

[callweb]

Yes it seems that is the case because no configuration.php is generated.

Yes, File Magager to upload and unpack.

Actually, i paid for the service of server setup and security hardening to my go to sysadmins. I will resort to them if i can figure this myself or here.

I tried to delete that and even disable php-fpm completely and same result.

This is indeed a server misconfiguration and not a Joomla problem. What is strange is this only happens with Joomla 4 not Joomla 3.

[Webdongle]

Enable those disabled php modules and restart the server

Find out what their security hardening is.

J3 probably uses different php code to write the configuration.php. possibly code that needs one of those missing php modules?

It is only deduction on my part as I have next to know knowledge of server set up or the code of Joomla installation. However it does seem a reasonable step to problem solve the issue.

[callweb]

Hi, thanks for your answer.

I contacted my sysadmins and they solved the problem. Server security module mod_evasive was blocking the installation.

What was strange is that Joomla 5 installed fine (and J3) so it was something specific to Joomla 4.

Thanks for the help