(UTC)
 Choose Language:
  YaBB Chat and Support Community › YaBB Support › General Usage and Feature Troubleshooting › You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
(Moderator Groups: YaBB Moderators, Development Team, Boardmod Team, Legacy Dev Team, Support Team)
‹ Previous Topic | Next Topic ›
Page Index Toggle Pages: [1] 2 3 ... 6
Topic Tools
Very Hot Topic (More than 25 Replies) You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl (Read 12,221 times)
spentastico2
YaBB Newcomer
*
Offline



Posts: 41

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #86 - Oct 22nd, 2012 at 12:47am
Post Tools
Yeah, the host fixed it, I guess!  

Quote:
Hi,

I have worked out what the problem was now. It was a layer of security that we include on our servers. It looks like the YaBB script uses some request variables that were being mistaken for cross site scripting, which was being causing the forbidden error. I have disabled this layer of security on your account and it seems to be working correctly now.
« Last Edit: Oct 22nd, 2012 at 12:49am by spentastico2 »  
Back to top
 
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #85 - Oct 20th, 2012 at 3:02pm
Post Tools
A. - I fixed your IP lock here -

B. - Speaking of fixes, I think your Host just fixed the problem.  I was just testing with Xnoddyx's test install and I was able to save Template Configurations, CSS Style Sheets and the Preview works.

It would be very useful to know what changes were made for future reference in troublehsooting.  (I have a Gunniess that says they changed IncludesNOXEC)  Smiley

It doesn't matter right now, you are probably back in business...

Smiley

Good Luck with YaBB
Cool
« Last Edit: Oct 20th, 2012 at 3:03pm by JonB »  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
spentastico2
YaBB Newcomer
*
Offline



Posts: 41

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #84 - Oct 19th, 2012 at 10:39pm
Post Tools
Oh hey BTW, could you unban the other IP address associated with my account here, please? It's my work IP and it starts with a 216. I'm getting a 403 Forbidden error when I try to visit the forum there.

Thanks!!
  
Back to top
 
IP Logged
 
spentastico2
YaBB Newcomer
*
Offline



Posts: 41

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #83 - Oct 19th, 2012 at 10:38pm
Post Tools

Yes. The ScriptAlias is

    ScriptAlias /cgi-bin/ /home/midohi/public_html/cgi-bin/
  
Back to top
 
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #82 - Oct 19th, 2012 at 1:42pm
Post Tools
@ spentastico -

Please ask your host if they have a ScriptAlias defined in their httpd.conf.

Thanks
Cool
  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #81 - Oct 19th, 2012 at 12:43am
Post Tools
Actually, I'm fairly confident the problem will disappear.

Edited:
Tomorrow I will configure a fresh Linux VM with the same configuration - No ScriptAlias and Folder Options - they are using, to see if I can duplicate the issue.

Wink
« Last Edit: Oct 19th, 2012 at 1:35am by JonB »  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,130
Location: Earth

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #80 - Oct 19th, 2012 at 12:32am
Post Tools
I'm a little concerned that what should have been a simple tag addition to prevent an errant 404 broke the preview function.  Shocked

Now I'm wondering if it's actually related to the main problem.

Off to Ikea. Back to this in the AM.

Edited: if all else fails, the css and templates can be edited manually - either through the host's file manager or via FTP. That's assuming everything else works. Not what you wanted to hear, I know.  Cry
« Last Edit: Oct 19th, 2012 at 12:35am by Dandello »  
If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #79 - Oct 19th, 2012 at 12:27am
Post Tools
Quote:
I'll post a recommended .htacess fix in the AM.


This is something only your host will likely be able to fix for you. I'll post a complete explanation with it.

Wink
« Last Edit: Oct 19th, 2012 at 12:29am by JonB »  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
spentastico2
YaBB Newcomer
*
Offline



Posts: 41

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #78 - Oct 19th, 2012 at 12:23am
Post Tools
Undecided Do what now?  Undecided
  
Back to top
 
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #77 - Oct 18th, 2012 at 11:43pm
Post Tools
OTAY - this kid is t-o-a-s-t.

That fix seems to break the preview.

I'm 90+% sure I am right about the problem. No more tries at fixes for now -

Cool

I'll post a recommended .htacess fix in the AM.  I don't think we can twiddle the .htaccess sucessfully - no matter whatever xnoddyx or I did with .htacess - it caused YaBB to ISE 500.

Edited:
You are correct does not fix the 403
I have returned ManageTemplates.pl to original in the cgi-bin/yt/Admin folder


Sorry no editing on the Quick Guides, but I will do it in the AM

Thanks for all your work.

Cool
« Last Edit: Oct 18th, 2012 at 11:52pm by JonB »  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,130
Location: Earth

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #76 - Oct 18th, 2012 at 11:42pm
Post Tools
It's a fix for ONE of the problems. But I doubt it's a fix for the 403 problem. If YaBB can find the css file to open it for editing, then YaBB knows where it is and shouldn't be throwing a 'script not found' on it.  BUT, who knows?
  
If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #75 - Oct 18th, 2012 at 11:30pm
Post Tools
Is that a fix for this problem, I'm not sure I have grokked if that will fix (or maybe fix) the present problem???
  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 2,130
Location: Earth

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #74 - Oct 18th, 2012 at 11:26pm
Post Tools
The quick fix for the bad path showing up in the server error log -

in Admin/ManageTemplates.p find
Code
Select All
	$fulltemplate =~ s/({|<)yabb style(}|>)/$tempstyles/g;


add after:
Code
Select All
	$fulltemplate =~ s/({|<)yabb html_root(}|>)/$yyhtml_root/g;


This is another one of those tags that never made it into the ManageTemplates.pl list of tags but instead of showing up as a '{yabb wtf_tag}' on the screen it returned a bad path.
« Last Edit: Oct 18th, 2012 at 11:30pm by Dandello »  
If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #73 - Oct 18th, 2012 at 11:16pm
Post Tools
OK it is a recursion problem - likely triggered bt the .htaccess

Explanation - anytime you need to refresh that inline frame, AdminIndex has to call itself. It fails on Open, Save or Preview - all of which use this call - AdminIndex.pl?action=modksin2

Apache Options Directives -

+IncludesNOEXEC
Server-side includes are permitted, but the #exec cmd and #exec cgi are disabled. It is still possible to #include virtual CGI scripts from ScriptAliased directories

(we don't have a ScriptAlias, I'm guessing, as we didn't get the two Directory Options Directive sets)


I'm betting that #exec_cgi being diabled is the culprit.  Shocked


Smiley
  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,785
Location: Land of the Blazing Sun!

YaBB 2.6.0
Re: You don't have permission to access /cgi-bin/yabb2/AdminIndex.pl
Reply #72 - Oct 18th, 2012 at 10:46pm
Post Tools
what's 'inside the iframe' at that moment?
  
I find your lack of faith disturbing.
Back to top
Facebook  
IP Logged
 
Page Index Toggle Pages: [1] 2 3 ... 6
Topic Tools
‹ Previous Topic | Next Topic ›
 
  « Board Index ‹ Board  ^Top   

YaBB Chat and Support Community » Powered by YaBB 2.6.0!
YaBB Forum Software © 2000-2014. All Rights Reserved.

Valid RSS Valid XHTML Valid CSS Powered by Perl Source Forge

YaBB Facebook Group Page

Vulnerability Scanner