403 Forbidden (Forums&file=groupcp)

Posted: Thu Jan 31, 2008 5:54 am

I have a nuke site with version 7.8 and when I try to access Groups

Code:

modules.php?name=Forums&file=groupcp

in forums i get this message:

Quote:

Forbidden
You don't have permission to access /modules.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

What could cause this? Thats the only module that gives me this. I have tried to use a Forums module from ravens and also tried to change theme. No luck so far..

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

This looks like possibly a bad rewrite rule. If you directly type the url, as in http://www.yoursite.com/modules.php?file=groupcp , does that let you in?

Posted: Sun Feb 03, 2008 4:04 am

No, cause it looks the same, just gets altered when I type it in this forum

Posted: Sun Feb 03, 2008 12:06 pm

Then you definitely have a rewrite rule issue. You need to trace where the rewrite rule is making the error.

Posted: Sun Feb 03, 2008 12:31 pm

Nono, the link looks like the one you posted above, and its like that when I click it. Its just that i get that error page..

Posted: Sun Feb 03, 2008 12:39 pm

Right. What's happening is that it tries to redirect to an invalid link.

Posted: Tue Feb 05, 2008 1:32 am

Site has been down for a while but now its back and here you can see what i mean:
http://www.goodfellasnipers.com/modules.php?name=Forums

Press groups there. I cant find any redirects from that, is there is how and where should i look for it..?

Regular Joined: Dec 28, 2004 Posts: 94

I've seen this before somewhere.......

Do you get the same when you try to moderate any of your forums?

If so it may well be something to do with Mod_Security on your server.

You'll have to ask your server host to disable it.

TTFN

Trub

registered · Posted: Tue Feb 05, 2008 6:06 am

Trubador wrote:

You'll have to ask your server host to disable it.

Or better yet, if they can adjust the offending rule.

I agree, though, it does sound like it could be Mod_Security.

Posted: Tue Feb 05, 2008 6:41 am

Yeah I just went back through my past emails.

I had problems with any links containing "groupcp" and "modcp" with 404 errors.

montego is right. Ask them to remove the rules containing these two phrases for mod_security.

I dont think I had any trouble with any other phrases apart from the above two.

TTFN

Trub

Posted: Tue Feb 05, 2008 9:16 am

Its only the group link that dont work, moderate and all others are just fine

Posted: Tue Feb 05, 2008 10:46 am

Quite frankly, this looks like a simple mod_rewrite issue.

Please open your .htaccess file and do a search by "groupcp" (without the quotes).

There should be 3 lines of code that create the correct format for the three different possible command types for this function.

I am using GT-NexGen in this example so I will show you all three parts of the code that should be in two files. (Consult your particular GoogleTap documentation for the exact location of your corresponding gt commands beyond the .htaccess file)

Please note that this is right out of the custom code that I wrote for my particular domain and there is little or no chance that my code will match yours because most of the mod rewrites for Nuke that I have seen are very much incomplete and I believe this is one of the codes I had to fix several years back.

GT NextGen example:
.htaccess file

Code:

RewriteRule ^forums-group([0-9]*)([a-z]*).html forums.html?file=groupcp&g=$1&validate=$2 [L]


RewriteRule ^forums-group([0-9]*).html forums.html?file=groupcp&g=$1 [L]


RewriteRule ^forums-group.html forums.html?file=groupcp [L]

IN Code for groupcp function found in: /GoogleTap/GT-forums.php

Code:

"'(?<!/)modules.php\?name=Forums&amp;file=groupcp&amp;g=([0-9]*)&amp;validate=([a-z]*)'",


"'(?<!/)modules.php\?name=Forums&amp;file=groupcp&amp;g=([0-9]*)'",


"'(?<!/)modules.php\?name=Forums&amp;file=groupcp'",

Corresponding OUT Code for groupcp function. Please note how this matches up with my .htaccess file so you can rename these but they must match the .htaccess file.

Code:

"forums-group\\1\\2.html",


"forums-group\\1.html",


"forums-group.html",

This will resolve your issue because at present, your link to this function is malformed. This will correct the problem by having the link end in .html accommodating the mod.

Steph

Posted: Tue Feb 05, 2008 11:02 am

Hmm.. Dont use google tap, dont have those entries in .htaccess so dont know what to do..

Posted: Tue Feb 05, 2008 11:06 am

Well, if your links are ending in .html with nuke, you are using SOMEONE'S GoogleTap.

Where did you get your version of 7.8?
What is in the .htaccess file in the root of your Nuke Installation?
Meaning, do you have anything in there that starts with:

Code:

RewriteRule

Posted: Tue Feb 05, 2008 11:09 am

There is no html in the links, I got the 7.8 from evaders and its a standard .htaccess..

http://www.goodfellasnipers.com/modules.php?name=Forums&file=groupcp

Posted: Tue Feb 05, 2008 11:14 am

I See. the "forums.html?file=groupcp" threw me off.

Please post the first 10 lines of code in the file modules/Forums/groupcp.php

(After the comments).

Thanks

Posted: Tue Feb 05, 2008 11:25 am

Code:




<?php


/***************************************************************************


 *                               groupcp.php


 *                            -------------------


 *   begin                : Saturday, Feb 13, 2001


 *   copyright            : (C) 2001 The phpBB Group


 *   email                : support@phpbb.com


 *


 *   $Id: groupcp.php,v 1.58.2.27 2006/12/16 13:11:24 acydburn Exp $


 *


 *


 ***************************************************************************/





/***************************************************************************


 *


 *   This program is free software; you can redistribute it and/or modify


 *   it under the terms of the GNU General Public License as published by


 *   the Free Software Foundation; either version 2 of the License, or


 *   (at your option) any later version.


 *


 ***************************************************************************/


if (!eregi("modules.php", $_SERVER['PHP_SELF'])) {


    die ("You can't access this file directly...");


}


$module_name = basename(dirname(__FILE__));


require("modules/".$module_name."/nukebb.php");





define('IN_PHPBB', true);


include($phpbb_root_path . 'extension.inc');


include($phpbb_root_path . 'common.'.$phpEx);

Posted: Tue Feb 05, 2008 11:52 am

It's almost like there is an issue with permissions between the db and modules.php.

I am kind of weirded out that your first lines of code differ from the standard of:

Code:

if ( !defined('MODULE_FILE') )


{


   die("You can't access this file directly...");


}


$module_name = basename(dirname(__FILE__));


require("modules/".$module_name."/nukebb.php");





define('IN_PHPBB', true);


include($phpbb_root_path . 'extension.inc');


include($phpbb_root_path . 'common.'.$phpEx);

but that shouldn't be the cause of the problem.

I'm assuming you have already created groups via your forums/admin panel and now you are trying to look them up and use this function. Keep in mind, no groups, no function.

If this is evaders code, I'd have him look at it. If it's out of the box junk nuke code, I'd say make sure it is all patched. If you want, you can give me your modules.php and your complete groupcp.php and I can compare them to the 50 versions of them that I have.

Posted: Tue Feb 05, 2008 12:01 pm

Its standard nuke 7.8 patched to 3.3...
I worked before, but not anymore and yes there are two groups and I have used those before. Thats why I dont get it..

Posted: Tue Feb 05, 2008 12:06 pm

When you say it worked "before".. before what?

Posted: Tue Feb 05, 2008 12:13 pm

Last time I used it, no changes done on the site.. Thats why im boggled about this...

registered · Posted: Tue Feb 05, 2008 3:45 pm

It is the standard Patched code. I've checked with the 7.8 I'm running. It is not a problem with the code.

Pretty sure its a mod_security problem... any link that includes 'groupcp' is rejected