XF 2.2 you don't have permission

[DevBest]

Hi Folks,

I have a little weird problem.
I have my forum in maintance mode.
When it is in maintance mode and i want to access the website on my mobile (i tried safari, google, firefox) it tell me FORBIDDEN - You don't have permissions to access this resource. if i put /index.php after it it appear! And when I login at that point with my admin account it is accessible without the /index.php But When i put my forum out of the maintance (forum online) mode it is working normally. should there be something wrong with the .htaccess file?

Thanks

 

[TPerry]

Are you using the shipped .htaccess and make sure your root location is correct?
Of so, then there should not be any issues if you are on an Apache HTTP server.
If you are on nginx or OpenLightSpeed, then you can't rely on .htaccess.

 

[DevBest]

Are you using the shipped .htaccess and make sure your root location is correct?
Of so, then there should not be any issues if you are on an Apache HTTP server.
If you are on nginx or OpenLightSpeed, then you can't rely on .htaccess.

Well I don’t know what is wrong this time.
I had an other domain name before on the same server no issue at all. Now I’m busy making a new community and I have this issue

 

[Black Tiger]

I had an other domain name before on the same server no issue at all. Now I’m busy making a new community and I have this issue

Might be a cookie issue.
Try logging out, then remove all cookie's for your current and old domain name and forum and then try to login again and see if the issue persists.

 

[DevBest]

Might be a cookie issue.
Try logging out, then remove all cookie's for your current and old domain name and forum and then try to login again and see if the issue persists.

thanks seems this was the problem

 

[MySiteGuy]

Are you using the shipped .htaccess and make sure your root location is correct?
Of so, then there should not be any issues if you are on an Apache HTTP server.
If you are on nginx or OpenLightSpeed, then you can't rely on .htaccess.

Open Litespeed works fine with the Xenforo .htaccess file and mod_rewrite rules in general. It doesn't support things like resource authentication via .htaccess like Apache does, but they've gone to great lengths to be compatible with rewritecond/rewriterule.

 

[TPerry]

Open Litespeed works fine with the Xenforo .htaccess file and mod_rewrite rules in general. It doesn't support things like resource authentication via .htaccess like Apache does, but they've gone to great lengths to be compatible with rewritecond/rewriterule

Was specifically referring to having the .htaccess in the directory and expecting to work as it does with Apache. nginx and OLS require a different approach. OLS may have changed that, but last time I used it you had to use the GUI to do your rewrites in... granted, they did use (mostly) Apache sytnax.

 

[Mikethemix]

We have same error message - but only when trying to open specific posts or media items - very strange.
Yesterday we tried adding a media item with a description "if looks could kill" and it was immediately rejected with the message:

Forbidden​

You don't have permission to access this resource.

However, a second attempt to add the same media item without that description worked fine.
Could there be some AI screening and blocking taking place? Where?

We now have some posts blocked, and quite a few media items blocked that were previously available.
An old backup copy of our forum has the same issue for the same items, so it doesn't seem to be corruption.
However we cannot open the affected items to see what might be causing the problem!

All our users have the same experience with the same items - irrespective of their access rights - some are "registered" others are "admin or moderators". Same problem whatever browser or platform is used.
The problem was first noticed a few months ago when we were using the previous release, we are now on latest releases for XF2 and XFMG.

Our forum is hosted by Hostwinds, with a server in Holland.

Clues very welcome! 1984??? Brave New World???

 

[Jeremy P]

That message comes from your web server so you would need to check the web server log to see what's causing it. More than likely just some overzealous firewall (kill is a command on many servers).

 

[Mikethemix]

Many thanks - where can i find that webserver log? Is that something in the hosting?

 

[Jeremy P]

Yeah. If you're using shared hosting, contact your host.

 

[Mikethemix]

Many thanks - i'm on the case now...