Results 1 to 10 of 10
  1. 18-12-2008, 23:22 #1
    MattHawkins
    MattHawkins is offline Junior Member
    Join Date
    Jul 2007
    Location
    UK
    Posts
    25

    Default 403 Error on Form Submit

    A form on my site has stopped working. It used to work but if I submit now it throws a 403 error. The form HTML is generated and then processed with a PHP script. It has worked in the past but something must have changed on the server.

    I have just isolated the problem.

    If I disable mod_security the form works ok (but I don't want to do this).

    The form submits the contents of a text box which includes a URL. mod_security clearly no longer likes me submitting text parameters that are URLs ie anything looking like "http://www.asitehere.com/". It works if I remove the "http://" bit from the front.

    I use the form to dynamically add URL links to a database table and I want them to be the full URL.

    So my question is how do I submit a URL that the user has typed in without mod_security going crazy?

    I do not want to exclude the http:// bit of the URL because other people use the site and they will never remember to exclude it ... and a 403 error isn't going to help them when they forget.

    My only thoughts are to use javascript to store a hidden version of the url that is typed in but strip off the http bit. It could then be reattached before being written into the database.

    Any help would be appreciated!

    Thanks,

    Matt
    Reply With Quote Reply With Quote
  2. 19-12-2008, 04:06 #2
    Rock's Avatar
    Rock
    Rock is offline Technical Support (eUKhost.com)
    Send a message via MSN to Rock Send a message via Skype™ to Rock
    Join Date
    Oct 2006
    Location
    localhost
    Posts
    3,375

    Thumbs up

    Hi Matt,

    Our CTO, NickJ, is well versed with the mod_security, web application firewall. He'd be able to get this sorted for you once he's back. Meanwhile could you please open up a ticket with the appropriate details to produce the error on our end. We'd be glad to that you're sticking to the security for your website, rather than getting it removed in order to get the form working.. I like people who adhere to security Good luck..

    Rock _a.k.a._ Jack
    Windows Hosting || Windows Reseller Hosting
    Cloud Hosting 100% UPTIME! || Powerful Dedicated Servers
    Follow eUKhost on Twitter || Join eUKhost Community on Facebook

    For complaints, grievances or suggestions kindly email our FeedBack Dept.
    Proper action will be taken accordingly & instantaneously!
    Reply With Quote Reply With Quote
  3. 19-12-2008, 04:27 #3
    Daniel's Avatar
    Daniel
    Daniel is offline Got root?
    Send a message via MSN to Daniel Send a message via Skype™ to Daniel
    Join Date
    Aug 2008
    Location
    England, UK
    Posts
    179

    Default

    Quote Originally Posted by Rock View Post
    Hi Matt,

    Our CTO, NickJ, is well versed with the mod_security, web application firewall. He'd be able to get this sorted for you once he's back. Meanwhile could you please open up a ticket with the appropriate details to produce the error on our end. We'd be glad to that you're sticking to the security for your website, rather than getting it removed in order to get the form working.. I like people who adhere to security Good luck..
    *impresses with big firewall*

    On a serious note I am also a security freak, software firewalls, hardware firewalls, AV etc. Anybody who runs without them is
    Dan Miller
    Reply With Quote Reply With Quote
  4. 19-12-2008, 07:42 #4
    Rock's Avatar
    Rock
    Rock is offline Technical Support (eUKhost.com)
    Send a message via MSN to Rock Send a message via Skype™ to Rock
    Join Date
    Oct 2006
    Location
    localhost
    Posts
    3,375

    Cool

    Quote Originally Posted by Daniel View Post
    *impresses with big firewall*

    On a serious note I am also a security freak, software firewalls, hardware firewalls, AV etc. Anybody who runs without them is
    /me is much impressed to know that

    Rock _a.k.a._ Jack
    Windows Hosting || Windows Reseller Hosting
    Cloud Hosting 100% UPTIME! || Powerful Dedicated Servers
    Follow eUKhost on Twitter || Join eUKhost Community on Facebook

    For complaints, grievances or suggestions kindly email our FeedBack Dept.
    Proper action will be taken accordingly & instantaneously!
    Reply With Quote Reply With Quote
  5. 19-12-2008, 13:15 #5
    MattHawkins
    MattHawkins is offline Junior Member
    Join Date
    Jul 2007
    Location
    UK
    Posts
    25

    Thumbs up

    I've submitted a ticket.

    <html>
    <body>
    <?php

    //
    // Test Form to submit URL text
    //
    echo " <!-- Form to add new link -->\n";
    echo " <form name=\"test_form\" method=\"post\" action=\"test_form.php\">\n";
    echo " <fieldset>\n";
    echo " <legend>Test Form</legend>";

    echo " <table>\n";
    echo " <tr><td>Name</td><td><input type=\"text\" name=\"ilink_name\" size=\"80\" maxlength=\"80\" value=\"Website Name\" /></td></tr>\n";
    echo " <tr><td>URL</td><td><input type=\"text\" name=\"ilink_url\" size=\"80\" maxlength=\"255\" value=\"enter url\" /></td></tr>\n";
    echo " </table>\n";

    echo " <input type=\"submit\" name=\"isubmit\" value=\"Add New\" />\n";
    echo " </fieldset>\n";
    echo " </form>\n";

    ?>

    </body>
    </html>
    This simple PHP script demos the issue.

    The script works if you enter "www.google.com" but throws a 403 error if you enter "http://www.google.com"

    It appears to actually be the "http:/" at the start that causes the problem.

    I'll wait for the support ticket response. It's not a critical issue and I can rework the code if required.

    Just thought I'd post this info for other users who may search for it in the future.

    Matt
    Reply With Quote Reply With Quote
  6. 02-01-2009, 19:07 #6
    swexpert
    swexpert is offline Premium Member
    Join Date
    Jan 2007
    Posts
    210

    Default

    Hi,
    Just out of curiosity, have you tried entering www.someurl.com/index.php? Well as I said, just curious if your script is handling character / (must be going UTF encoded to your script) etc...

    Best of luck!
    Inderjeet
    Reply With Quote Reply With Quote
  7. 12-02-2009, 01:40 #7
    a1phanumeric
    a1phanumeric is offline new member
    Join Date
    Feb 2009
    Posts
    6

    Default 403 Form Post Error

    I'm also looking for a solution to this...
    Reply With Quote Reply With Quote
  8. 12-02-2009, 01:47 #8
    a1phanumeric
    a1phanumeric is offline new member
    Join Date
    Feb 2009
    Posts
    6

    Default Solution to 403 Form Post Error

    I have found a solution to the form post 403 error (when using a URL as some data to submit). Why not use this technique too? I found it at:

    LINK -> edrackham.com/javascript/solution-to-form-submit-403-error

    It works for me no problems what-so-ever!
    Reply With Quote Reply With Quote
  9. 12-02-2009, 10:47 #9
    Rock's Avatar
    Rock
    Rock is offline Technical Support (eUKhost.com)
    Send a message via MSN to Rock Send a message via Skype™ to Rock
    Join Date
    Oct 2006
    Location
    localhost
    Posts
    3,375

    Wink

    Quote Originally Posted by a1phanumeric View Post
    I have found a solution to the form post 403 error (when using a URL as some data to submit). Why not use this technique too? I found it at:

    LINK -> edrackham.com/javascript/solution-to-form-submit-403-error

    It works for me no problems what-so-ever!
    Thank you for sharing the link & glad it worked out for you

    Rock _a.k.a._ Jack
    Windows Hosting || Windows Reseller Hosting
    Cloud Hosting 100% UPTIME! || Powerful Dedicated Servers
    Follow eUKhost on Twitter || Join eUKhost Community on Facebook

    For complaints, grievances or suggestions kindly email our FeedBack Dept.
    Proper action will be taken accordingly & instantaneously!
    Reply With Quote Reply With Quote
  10. 09-09-2011, 12:24 #10
    mmujawer
    mmujawer is offline new member
    Join Date
    Sep 2011
    Posts
    1

    Default 403 Form Post Error

    Even i have same problem “Form Submit 403 Error”. But in my case if i use any HTML tags (like bold or any other tags) than 403 error will show. How can i solve this issues???

    is this b’cos of mod_security ??????
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules