server error 403 no permission to access this document
by ralphw3 from LinuxQuestions.org on (#5QPDK)
I had an ubuntu virtual server
Have changed last week to a dedicated server (more ram / bandwidth etc) and other than before it is managed with Plesk
With the help of many internet sites I got my old VS to run well in a short time.
The new one works - lets say - 95%
but there are some scripts that don't
I ported the website 1:1 - but it seems I have problems with permissions
I have a script with a textarea and a submit button. After I hit the button I get
Server Error
403
Forbidden
You do not have permission to access this document.
The page is created and I can see it with FTP And when I open the file by starting the website again I can see it as I expect.
EDIT: It works with simple chars - as soon as I send tags and code the Plesk security blocks me - the owner - for at least 5 Minutes - what a mess.
Thanks for any help
This is part of the error log:
[Thu Oct 14 00:23:04.118360 2021] [:error] [pid 4190:tid 140115120715520] [client 178.115.54.190:0] [client 178.115.54.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml\\\\s)" at ARGS:MyText. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "70"] [id "211220"] [rev "4"] [msg "COMODO WAF: PHP Injection Attack||truthareus.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "truthareus.com"] [uri "/EditFiles.php"] [unique_id "YWdcSNJ7HNny0fzzyvKTkwAAAE0"],
I guess I shall get rid of Plesk and configure the server clean and simple with instructions I find and found on the web.
Even if I ran into problems to serve 2 or more domains under one IP
.
Have changed last week to a dedicated server (more ram / bandwidth etc) and other than before it is managed with Plesk
With the help of many internet sites I got my old VS to run well in a short time.
The new one works - lets say - 95%
but there are some scripts that don't
I ported the website 1:1 - but it seems I have problems with permissions
I have a script with a textarea and a submit button. After I hit the button I get
Server Error
403
Forbidden
You do not have permission to access this document.
The page is created and I can see it with FTP And when I open the file by starting the website again I can see it as I expect.
EDIT: It works with simple chars - as soon as I send tags and code the Plesk security blocks me - the owner - for at least 5 Minutes - what a mess.
Thanks for any help
This is part of the error log:
[Thu Oct 14 00:23:04.118360 2021] [:error] [pid 4190:tid 140115120715520] [client 178.115.54.190:0] [client 178.115.54.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml\\\\s)" at ARGS:MyText. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "70"] [id "211220"] [rev "4"] [msg "COMODO WAF: PHP Injection Attack||truthareus.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "truthareus.com"] [uri "/EditFiles.php"] [unique_id "YWdcSNJ7HNny0fzzyvKTkwAAAE0"],
I guess I shall get rid of Plesk and configure the server clean and simple with instructions I find and found on the web.
Even if I ran into problems to serve 2 or more domains under one IP
.