panfor's Replies | ww.wp.xz.cn

Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)

Forum: Plugins
In reply to: [WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards] Error 403 prevents basic tasks from being performed

Thread Starter panfor
(@panfor)

4 years, 8 months ago

So I’m working with my hosting company (ovh) on disabling this rule in modsecurity. Thank you for helping me find a solution. We can consider this topic closed.

Thanks.

Forum: Plugins
In reply to: [WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards] Error 403 prevents basic tasks from being performed

Thread Starter panfor
(@panfor)

4 years, 8 months ago

👍 I think I have found related entry in error log:

[Wed Oct 06 13:49:30 2021] [error] [client 5.184.65.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\btable_name\\b" at ARGS_NAMES:table_name. [file "/usr/local/apache2/conf/modsecurity/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "197"] [id "959914"] [rev "2.1.1"] [msg "Blind SQL Injection Attack"] [data "table_name"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "XXXXX"] [uri "/kontag/wp-admin/admin.php"] [unique_id "YV2NSqIx7y7Fx3fusNdh4gAAAEo"]

Mod_security doesn’t like the phrase “table_name”… What can I do with that?

Forum: Plugins
In reply to: [WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards] Error 403 prevents basic tasks from being performed

Thread Starter panfor
(@panfor)

4 years, 8 months ago

There is mod_security active, but in error log there are no 403 errors associated with wpda requests. In addition, other WordPress installations (on the same server) run plugins that use Ajax without any problem. Thanks.

Forum: Plugins
In reply to: [WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards] Error 403 prevents basic tasks from being performed

Thread Starter panfor
(@panfor)

4 years, 8 months ago

No, I have removed all plugins. There is only WordPress core and WP Data Access.

Thanks.

Forum: Plugins
In reply to: [WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards] Error 403 prevents basic tasks from being performed
Thread Starter panfor
(@panfor)

4 years, 8 months ago
Thanks…

Full url is https://…/wp-admin/admin.php?action=wpda_show_table_actions&wpdaschema_name=kontag&table_name=kontag_wpda_csv_uploads&_wpnonce=5670363ec9&dbo_type=BASE%20TABLE&rownum=0

and response is HTML code of 403 Forbidden Error:
```
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>
```

Viewing 5 replies - 1 through 5 (of 5 total)