My server is Linux server and reseller is mine. So i can reach WHM panel, too .
When GET data comes like :
a.php?url=http://www.domain.com
return 403 Forbidden.
But if data comes like this :
a.php?url=www.domain.com
it's working.
So, http:// generating an error. How can i fix it ?
Also, this is returning 403 Forbidden :
a.php?url=http%3a%2f%2fwww.domain.com
Thanks.
This is definitely one of the mod_security CoreRules . I've had the very same issue on my previous host. I don't remember the rule name however.
You should investigate the core rules version. 2.1.1 would be current, and might have relaxed that peculiar filter. If updating or reconfiguring doesn't help you would else have to base64_encode() your url parameter (simpler encodings are sniffed by mod_security).
SecFilterDebugLog /var/log/apache2/modsec_log
SecFilterDebugLevel 4
Enables the debug logging of mod_security, so you can find out which rule actually caused the issue - if you want to disable it (advisable). http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/modsecurity-manual.html#07-logging
您需要对查询字符串进行编码,以使其有效,请参见urlencode()
re:404-也许您正在将查询字符串重写到某个位置的路径,并且没有启用AllowEncodedSlashes?
It is mod_security's 10_asl_rules.conf causing this error.
It is the .htaccess is picking up on something in that URL and sending forbidden headers.
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.