XF 1.5 "You dont have permission to access" error

[Azman]

i've these error when trying to upload an image.
confirm i've changed chmod for "data" and "internal_data" to 7777

i've gone through xf community but still cannot find any solution to this.

can someone share some tips how can i revolve this.

 

[Chris D]

Do you have any add-ons related to attachments?

"/attachments/upload" is not a directory that we would try to upload files to.

 

[Mike]

I'd guess it's more of a mod_security-type issue that's blocking the request before it even gets to XenForo.

 

[Azman]

well i dont really know. my test site seems to be working fine. but not the actual site.
my forum actually is an old forum based on smf. i migrated to xf because of its features and all. beside this, my users also experiencing strange errors. almost similar access error.

i'll talk to my hosting on how to go about the mod_security.

just one more question. originally the xf was installed in a "forum" folder. then i moved the whole installation to the root. can that be the cause? is it possible to reinstall a fresh xf in the same location?

 

[Paul B]

just one more question. originally the xf was installed in a "forum" folder. then i moved the whole installation to the root. can that be the cause? is it possible to reinstall a fresh xf in the same location?

No, it's unlikely to be the cause.

It's typically going to mod_sec or some other security mechanism as suggested.
Your host should be able to resolve it.

 

[Azman]

noted.

already submit a ticket for that. hopefully they can resolve that. thanks guys

 

[Azman]

just got the reply. support ask me to include the following in the htaccess

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

unfortunately the error still there.
anything else need to be done after changing the htaccess file?

 

[Chris D]

Do you have a directory in the root of your XF installation named "attachments"?

 

[Azman]

you are right Chris. somehow the software detect the old directory and use it for the upload. just rename the folder everything work just fine.
thank you very much