Welcome to ShenZhenJia Knowledge Sharing Community for programmer and developer-Open, Learning and Share
menu search
person
Welcome To Ask or Share your Answers For Others

Categories

My server is Linux server and reseller is mine. So i can reach WHM panel, too .

When GET data comes like :

a.php?url=http://www.domain.com

return 403 Forbidden.

But if data comes like this :

a.php?url=www.domain.com

it's working.

So, http:// generating an error. How can i fix it ?

Also, this is returning 403 Forbidden :

a.php?url=http%3a%2f%2fwww.domain.com

Thanks.

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
thumb_up_alt 0 like thumb_down_alt 0 dislike
991 views
Welcome To Ask or Share your Answers For Others

1 Answer

This is definitely one of the mod_security CoreRules. I've had the very same issue on my previous host. I don't remember the rule name however.

You should investigate the core rules version. 2.1.1 would be current, and might have relaxed that peculiar filter. If updating or reconfiguring doesn't help you would else have to base64_encode() your url parameter (simpler encodings are sniffed by mod_security).

SecFilterDebugLog /var/log/apache2/modsec_log
SecFilterDebugLevel 4

Enables the debug logging of mod_security, so you can find out which rule actually caused the issue - if you want to disable it (advisable). http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/modsecurity-manual.html#07-logging


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
thumb_up_alt 0 like thumb_down_alt 0 dislike
Welcome to ShenZhenJia Knowledge Sharing Community for programmer and developer-Open, Learning and Share
...