Getting 403 error on just one page

16 years 8 months ago #1955 by peakoverload.com
I've recently installed SEF Advance and it appears to be working correctly everywhere on my site except one page where I just get a 403 Forbidden message.

The page in question is for my gallery which is a static content page (but I have other static content pages that work fine) that has a .swf file embeded into it. The gallery I'm using is SlideShow Pro and I'm also using Slideshow Pro director so that I can administer my gallery online without having to use Flash MX or edit any XML files.

If I access my gallery via Slideshow Pro Director it all works fine and if I disable SEF Advance then I can access the gallery from my main menu's in Joomla. So the problem does seem to be caused either in part or totally by SEF Advance.

This is my .htaccess file
   1.
      #
   2.
      # mod_rewrite in use
   3.
      #
   4.
   5.
      RewriteEngine On
   6.
   7.
      # Uncomment following line if you get 403 Forbidden Error
   8.
   9.
      Options +FollowSymLinks
  10.
  11.
      # Uncomment following line if your webserver's URL
  12.
      # is not directly related to physival file paths.
  13.
      # Update YourMamboDirectory (just / for root)
  14.
  15.
      #RewriteBase /YourMamboDirectory
  16.
  17.
      #
  18.
      # Rules
  19.
      #
  20.
  21.
      #RewriteCond %{REQUEST_URI} ^(/component/option,com) [NC,OR]
  22.
      RewriteCond %{REQUEST_FILENAME} !\.(jpg|jpeg|gif|png|css|js|pl|txt)$
  23.
      RewriteCond %{REQUEST_FILENAME} !-f
  24.
      RewriteCond %{REQUEST_FILENAME} !-d
  25.
      RewriteRule ^(.*) index.php
  26.
  27.
      ########## Begin - Rewrite rules to block out some common exploits
  28.
      ## If you experience problems on your site block out the operations listed below
  29.
      ## This attempts to block the most common type of exploit `attempts` to Joomla!
  30.
      #
  31.
      # Block out any script trying to set a mosConfig value through the URL
  32.
      RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
  33.
      # Block out any script trying to base64_encode crap to send via URL
  34.
      RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
  35.
      # Block out any script that includes a <script> tag in URL
  36.
      RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
  37.
      # Block out any script trying to set a PHP GLOBALS variable via URL
  38.
      RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
  39.
      # Block out any script trying to modify a _REQUEST variable via URL
  40.
      RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR]
  41.
      # Block out any script trying to execute an extern script in the URL
  42.
      RewriteCond %{QUERY_STRING} http [OR]
  43.
      RewriteCond %{QUERY_STRING} ftp
  44.
      # Send all blocked request to homepage with 403 Forbidden error!
  45.
      RewriteRule ^(.*)$ index.php [F,L]
  46.
      #
  47.
      ########## End - Rewrite rules to block out some common exploits

Rendering Time: 0 Sec.
[ Top ]


Commenting or uncommenting line 9 doesn't make a difference. If the truth be known, having now tried so many different things to get this to work I now can't remember where this .htaccess file came from. I can't remember if it came from the default Joomla installation, whether it came with SEF Advance or if read somewhere that this one should work.

Like I say SEF Advance is working in all other areas of my site it's just this one static page that doesnt work

My site is www.peakoverload.com

Any ideas?

Please Log in or Create an account to join the conversation.

16 years 8 months ago - 16 years 8 months ago #1956 by peakoverload.com
Have now kinda got it working. If I enter an alias it will work but ONLY if I don't use the word gallery. In other words the 'correct' url should be www.peakoverload.com/gallery/ but instead I'm having to use www.peakoverload.com/gallery2/

This is fine for people just navigating around my site but I've posted links to my gallery all over the  Internet and now if any of those are clicked on they'll just get the 403.

Please Log in or Create an account to join the conversation.

16 years 8 months ago #1957 by peakoverload.com
Update:

Well I've got it all working I just don't understand why what I did made a difference. I just added .html to the suffix field in the SEF Advance configuration, unpublished the alaises I'd set up for /gallery2/ and hey presto it's working again  ??? ??? ??? ??? ???

It's great that it's working, just wish I knew why it didn't work in the first place and why adding .html makes it work!

Please Log in or Create an account to join the conversation.

16 years 8 months ago #1964 by Saka
If you have a folder called "gallery" on your site then you can't have a virtual URL with the same name, naturally.

www.peakoverload.com/gallery/ will then point to the directory folder instead. Rename that folder and it will work.

Emir Sakic
www.sakic.net

Please Log in or Create an account to join the conversation.

About us

We provide high quality Joomla components created by a co-founder and original core developer of Joomla. For over a decade, our products have been used by more than 20.000 webmasters around the world.

Stay in touch