Post by PICLTD » Tue Sep 08, 2020 9:14 pm

I have an issue to edit / add products in the Description section. I've searched all the topics and suggestions but I couldn't solve the case.

Required Information;
OpenCart Version: 3.0.2.0
PHP Version: PHP 7.1
I've checked all folders and files permissions, they are set as following info:
Files > Permissions = 6 4 4
Folders > Permissions = 7 5 5
I also checked permissions in the admin control panel, in the section
Admin > System > Users > User Groups > Administrator > Access Permission / Modify Permission all are ticked and set correctly.

What is the problem?
When Insert html code in the Product Description > summer note section, it can be saved without problem, but when I use these following codes in the html then it cannot be saved and the page will be redirected to the 403 Forbidden.
  • If I use Inline Style
  • If I use <script></script>
  • If I use <style></style>
  • If I use <img src="">
  • If I use <!-- -->
  • If I use link href
The issue is related to only these above mentioned parts, If I use them in the html, then it cannot be saved and page will redirect to 403 after click on save button.

Somewhere I found something related to mod_security, it should be turn off, I also have tried, no success.
I also renamed admin folder, but and configure it the config.php but no success.
I also checked htaccess, it looks good and RewriteBase / is set correctly.
I also tried to remove summernote and use textarea simply, but no success, it means the issue is not even related to summernote.

The strange part, when I downloaded the website and install it in xampp local host, then it works without any problem. It means the issue is related to server it seems but where is conflict part, I don't know.

Please advice me that how to solve it?
Thanks

Newbie

Posts

Joined
Tue Sep 08, 2020 8:44 pm

Post by khnaz35 » Tue Sep 08, 2020 10:43 pm

PICLTD wrote:
Tue Sep 08, 2020 9:14 pm
The strange part, when I downloaded the website and install it in xampp local host, then it works without any problem. It means the issue is related to server it seems but where is conflict part, I don't know.
Please advice me that how to solve it?
Thanks
Did you check your config file are properly configured? HTTP & HTTPS?
The 403 error usally happened because of the client side https://en.wikipedia.org/wiki/HTTP_403and also as you mentioned you have tested the site in localhost and it works without any error.
Ask your hosting service provide to have a look from the server side too

Urgent Questions shoot here: khnaz35@gmail.com
Enjoy nature ;) :) :-*


User avatar
Active Member

Posts

Joined
Mon Aug 27, 2018 11:30 pm
Location - Malaysia

Post by ADD Creative » Tue Sep 08, 2020 10:49 pm

Could be caused by ModSecurity or similar web application firewall.

www.add-creative.co.uk


Active Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by khnaz35 » Tue Sep 08, 2020 10:53 pm

ADD Creative wrote:
Tue Sep 08, 2020 10:49 pm
Could be caused by ModSecurity or similar web application firewall.
He mentioned that
ModSecurity
is not the Culprit. But as you mentioned could be any other web-application firewall ???

Urgent Questions shoot here: khnaz35@gmail.com
Enjoy nature ;) :) :-*


User avatar
Active Member

Posts

Joined
Mon Aug 27, 2018 11:30 pm
Location - Malaysia

Post by ADD Creative » Tue Sep 08, 2020 11:20 pm

khnaz35 wrote:
Tue Sep 08, 2020 10:53 pm
He mentioned that
ModSecurity
is not the Culprit. But as you mentioned could be any other web-application firewall ???
Somehow I missed that line in their post!

Does still look like the result of a false positive from a web application firewall.
Last edited by ADD Creative on Wed Sep 09, 2020 12:00 am, edited 1 time in total.

www.add-creative.co.uk


Active Member

Posts

Joined
Sat Jan 14, 2012 1:02 am
Location - United Kingdom

Post by khnaz35 » Tue Sep 08, 2020 11:24 pm

Yeah he need to talk to his/her host to figure it out since as he claimed the site have no issue on localhost.

Urgent Questions shoot here: khnaz35@gmail.com
Enjoy nature ;) :) :-*


User avatar
Active Member

Posts

Joined
Mon Aug 27, 2018 11:30 pm
Location - Malaysia

Post by PICLTD » Wed Sep 09, 2020 3:27 am

Well. I have submitted a ticket to the host provider, let's see what they reply. I'll update you regarding this too.

Newbie

Posts

Joined
Tue Sep 08, 2020 8:44 pm

Post by marchingants » Wed Jan 13, 2021 12:14 pm

It was mainly by ModSecurity or similar web application firewall.

Newbie

Posts

Joined
Wed Jan 13, 2021 12:08 pm
Who is online

Users browsing this forum: No registered users and 1 guest