1. A $20 ODSC-ADV membership is now available as an alternative to the standard $65 ODSC-OFTR membership, details via the JOIN button
  1. ThatGuyDuncan

    ThatGuyDuncan ODSC-OFTR Member

    Messages:
    227
    Joined:
    Apr 22, 2013
    Likes:
    16
    Town:
    Cambridge
    Hi mods:

    I am constantly (as in, every 15 seconds) getting an error that states I'm forbidden access to .xenforo/etcetera. I can browse around and read, but responding is often impossible. Am I the only one? This is happening on two machines, same gateway.
  2. ThatGuyDuncan

    ThatGuyDuncan ODSC-OFTR Member

    Messages:
    227
    Joined:
    Apr 22, 2013
    Likes:
    16
    Town:
    Cambridge
    The following error occurred:
    Forbidden
    You don't have permission to access /.xenforo/index.php on this server.
  3. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
    I'll look into it; does it tend to happen at a specific time of day?
  4. michel mondou

    michel mondou ODSC President

    Messages:
    1,125
    Joined:
    Apr 27, 2005
    Likes:
    108
    Town:
    Cambridge
    I have been getting the same message from time to time. I tried different browsers, etc. The only fix I found is to try again later.
  5. ThatGuyDuncan

    ThatGuyDuncan ODSC-OFTR Member

    Messages:
    227
    Joined:
    Apr 22, 2013
    Likes:
    16
    Town:
    Cambridge
    I have not noticed that, I would say it's reasonably constant.

    I recently deleted all browsing history & cookies, that's the only thing I can think of that has changed on my end. Logging out and logging back in seems not to make a difference. Have you recently applied any patches / upgrades?
  6. michel mondou

    michel mondou ODSC President

    Messages:
    1,125
    Joined:
    Apr 27, 2005
    Likes:
    108
    Town:
    Cambridge
    This problem just happened to me again a bunch of times: I had a smiley face in the reply I was trying to post. Once I removed the smiley, the problem went away.
  7. ThatGuyDuncan

    ThatGuyDuncan ODSC-OFTR Member

    Messages:
    227
    Joined:
    Apr 22, 2013
    Likes:
    16
    Town:
    Cambridge
    I sometimes use smilies, not often. I usually quote, that might be it.
  8. Cole McBain

    Cole McBain ODSC-OFTR Member

    Messages:
    274
    Joined:
    Jan 6, 2003
    Likes:
    19
    Town:
    Hopup Hollow
    I just got the same message trying to post pictures from today's bridge ride , got it on my Blackberry, then tried home computer and got the same.

    Cole


    You don't have permission to access /.xenforo/index.php on this server.
  9. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
    A while ago our host added a php function called ModSecurity. It prevents certain types of server access and I only found this out when I went to modify a forum template. Initially tech support advised I should contact them to get it turned off when I needed to do some work. No way this was suitable so I requested a change. They upgraded our cpanel so I can turn off ModSecurity. I do this first then put the forum in debug mode to make changes. As soon as I'm done I turn it back on. The ModSecurity function may be what's causing the problem. I'll find out more about what it does. When I first asked about it, tech support advised that it should always be used.
  10. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
    I have been testing and can confirm that ModSecurity is causing the issue. Posts that contain formatting are being rejected. Basic text works fine, but as soon as anything like changing the text colour or adding smilies is done, the post is blocked. The same thing happens when an image is attached to a post. ModSecurity rules can be modified to fix the problem, but the changes can only be done by the hosting company. Figuring out the details will take a while. I'll keep at it.
    ThatGuyDuncan likes this.
  11. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
  12. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
  13. Neil Edmunds

    Neil Edmunds ODSC Executive

    Messages:
    3,662
    Joined:
    May 5, 2003
    Likes:
    34
    Town:
    Gormley
    I've been talking with tech support about ModSecurity. As they learn about issues they change the ModSecurity rules and depending on the number of calls, they sometimes change the rules across an entire server instead of a specific site. At this point it looks like we are back to normal functionality without our host having to make specifc changes just for us. Tech support did say they made some recent changes (perhaps those were affecting our site).

    If anyone finds an issue please post here, or PM me, or send a note to odscadmin@gmail.com

    If a ride organizer needs to put up some information and has trouble, I can always turn off ModSecurity for a specific time period. My preference is to keep it functioning unless we have more disruption.
    ThatGuyDuncan likes this.
  14. ThatGuyDuncan

    ThatGuyDuncan ODSC-OFTR Member

    Messages:
    227
    Joined:
    Apr 22, 2013
    Likes:
    16
    Town:
    Cambridge