[RESOLVED] 403 Forbidden error
I'm getting the following error
Forbidden
You don't have permission to access /archive/code/get.php on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
I have two small php files
send.php
Code:
<?php ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Comment</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
</head>
<form action="get.php" method="post">
<p><textarea name="comments" rows="20" cols="100"></textarea></p>
<p><input type="submit" value="Send"></input></p>
</form>
</body></html>
get.php
Code:
<?php
echo $_REQUEST['comments'];
?>
If I enter the following text in the textarea, I get the error:
Code:
Bardwell's Ferry, Massachusetts
Train Wreck
April 7, 1886
FEARFUL RAILROAD ACCIDENT
An Express Train Plunges Down an Almost Perpendicular Precipice.
Only Three Persons on Board Known to Have Escaped Injury.
The Coaches Take Fire and the Wounded Passengers are Burned to Death - The Disaster Caused by the Sinking of the Track - A Partial List of the Injured.
GREENFIELD, Mass., April 7. -- A terrible disaster occurred on the Fitchburg railroad to-night, midway between Bardwell's ferry and West Deerfield station, the east bound passenger train, due at Greenfield at 6:05 P. M., going over an embankment 200 feet high. Six bodies have already been taken out of the ruins and it is not known how many others were killed. The train was the eastern express, and consisted of a baggage car, smoker, sleeping car, mail car and two ordinary passenger cars. The train was in charge of Conductor FORSTER, with HERBET LITTLEJOHN as engineer. The point where the accident occurred is the most dangerous on the road. Trains run on the edge of an embankment 200 feet above the Deerfield river. The bank is steep and covered with huge bouilders [sic] and masses of rock. When the train arrived at this point the track commenced to settle under it for a distance covering its entire length. The coaches broke from their trucks and went rolling over and over down the precipice. The engine broke from the tender, tearing up the track for twenty feet. Below rolled the Deerfield river, on the very edge of which the cars were thrown. As soon as they struck they caught fire from the stoves. The sleeping car was an entire wreck. It was occupied by seven passengers, not one of whom at this hour is known to have escaped injury. One man whose name is unknown is imprisoned in the wreck of the sleeper, where he is being buried alive. One little girl was picked up dead.
As soon as the news reached Deerfield a special train was made up and sent to the scene of the disaster, having on board several physicians, section men and a few citizens. On arriving at the scene of the wreck a horrible sight was witnessed. Darkness had settled over the spot. Far down on the river bank could be seen the smouldering embers of the holocaust. It was impossible to tell who was hurt and who was killed. Stout-hearted trackmen were lowered cautiously down the treacherous height and the rescue began.
MERRITT SEELY, superintendent of the National express, of Boston was found in the wreck and taken into the relief car. He had a wound four inches long and half an inch wide over the left temple. His left thigh was broken and also his left leg at the knee. Besides which he sustained internal injuries from which he will die.
D. CRANDALL, postal clerk, was plunged into the river and get ashore with difficulty. He was wounded about the head and his arm was fractured.
The Fitchburg coach was the only one that escaped conflagration. Deputy Sheriff BRYANT, of Greenfield, who was in this car, rescued two children from the flames but one was dead and the other dying. Their parents were on board, but cannot be found. Some of the injured and dead were taken to Shellburne Falls and some of the wounded to Greenfield.
C. P. BELL, of Nashua, N. H., was cut slightly on the head and leg, but was not seriously hurt. He was thrown head foremost into the river and went to the bottom barely escaping drownding [sic].
Conductor FOSTER is reported safe and but slightly injured.
D. C. WELLS of Andover had his shoulder hurt and his head cut. The car in which he was riding was broken in two and stood on end within a few feet of the river bank.
NICHOLAS DORGAN, of Greenfield, had his left arm and ankle broken and was seriously injured internally. A little girl who was a passenger on the train died in his arms from injuries received.
J. E. PRIEST, of Littleton, N. H., had his face and head cut.
Engineer LITTLEJOHN, of North Adams, was badly scalded, it is believed fatally.
A. K. WARNER, chairman of the Greenfield board of selectmen, was badly hurt, but his injuries are not fatal.
Great excitement prevails all along the road between here and North Adams.
Being interviewed by wire to-night at Shellburne Falls, Conductor FOSTER, said: I am unable to state how many were on the train. Only three men have thus far been found who escaped injury, and they place the number of passengers all the way from
If I remove the last letter "m" it works.
If I change the last word "from" to "some new words" it also works.
I'm lost.
Re: [RESOLVED] 403 Forbidden error
If you remove that bit then you shouldn't get that anymore. ;)
Re: [RESOLVED] 403 Forbidden error
Instead of modifying the security file, I added a .htaccess file that redirect the error to a page that explains the problem. What I would like to do is display the original string that trigger the error and highlite the words that caused the problem. Is there a way to capture the string?
Re: [RESOLVED] 403 Forbidden error
I don't actually know, but I hypothesise that the answer is no, since that would defeat the purpose of intercepting it.
If you have the access to, mod_security can be safely disabled if you employ best practice programming techniques such as parameterised queries and encoding HTML output using htmlentities() or such.
