Admin Backend Site now showing error Forbidden on all media.

[dls2004]

Hi All,

I have a problem, today I logged into the backend of my Abantecart V1.1.9. And when I went to products and added a new product and went to the media tab page it displays error Forbidden in red. And i cannot add / edit media for the product.

I went to a previously loaded product, clicked the media tab and this also shows error Forbidden for all media.

I cleared all cache data and this did not resolve the issue.

I checked permissions on the cache folder and these are write and read.

Any idea's why abantecart would suddenly throw this error message.

Help appreciated.

Barry M

[Basara]

Hello.

Do you have any errors warning in AbanteCart error log just after you see forbidden?

[dls2004]

Hi Basara,

Here is the error log of today's work.

2014-07-31 7:51:22 - method not exist:  AbanteCart core v.1.1.9 Error: controller method not exist Controllerresponsesproductproduct::main! in /home/dls2004/public_html/store/core/engine/dispatcher.php on line 315
2014-07-31 7:51:36 - method not exist:  AbanteCart core v.1.1.9 Error: controller method not exist Controllerresponsesproductproduct::main! in /home/dls2004/public_html/store/core/engine/dispatcher.php on line 315
2014-07-31 7:54:49 - warning:  AbanteCart core v.1.1.9 Invalid argument supplied for foreach() in <b>/home/dls2004/public_html/store/admin/controller/responses/common/zone.php</b> on line <b>57</b>



Any help would be gratefully appreciated.

The site was fine up until today.

I even tried a clean install of v1.1.9 in new directory with a new MySQL database instance and the error still occurs.

got me stumped?

[dls2004]

Update 01/08/2014.

My hosting service providers reckons they have not made any changes to PHP or MySQL.

I did a clean install of abantecart V1.1.9 in a different sub directory using sample data provided with the clean install.

And I still get the red error Forbidden on all images, media, pdf and video files.

when I attempt to configure resource manager, by clicking on common/resource_library

I get the error as shown below.

I have no idea how to fix this and can only guess my host provider has flicked a switch to which has caused this problem.

I have no way to fix it so am about ready to abandon abantecart as I do not wish to change hosting provider just to resolve this problem.

 

[abolabo]

is directory "resources" writable?

[dls2004]

Yes directory resources is writable, has permissions set as 775.

[abolabo]

check error log of apache (httpd) server in hosting provider CPanel. Probably it's a server misconfiguration.

[dls2004]

Where would I find the apache (httpd) server error logs in cPanel?

[abolabo]

Where would I find the apache (httpd) server error logs in cPanel?

you should to ask this question to hosting provider support team...

[dls2004]

OK thanks will do.

I agree most likely a server configuration error as the problem didn't exist previously and started on 30/07/2014.

Will keep you posted on the outcome.

Update: Problem resolved, looks like the php settings did not get correctly set in cPanel.

Reset PHP settings and made some changes in PHP settings and the media became visible again in the backend. I suspect it was the memory_limit being set to low at 2M.

[shaun31]

i have had the same problem recently and contact host company and here is the outcome

While checking the server logs, I find that the domain has trigerred mod-security rules:
==============================
[Wed Aug 13 22:36:01.825014 2014] [:error] [pid 13483] [client 217.147.80.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:t(?:able_name\\\\b|extpos[^a-zA-Z0-9_]{1,}\\\\()|(?:a(?:ll_objects|tt(?:rel|typ)id)|column_(?:id|name)|mb_users|object_(?:id|(?:nam|typ)e)|pg_(?:attribute|class)|rownum|s(?:ubstr(?:ing){0,1}|ys(?:c(?:at|o(?:lumn|nstraint)s)|dba|ibm|(?:filegroup|o ..." at ARGS_NAMES:object_name. [file "/var/cpanel/cwaf/rules/cwaf_02.conf"] [line "289"] [id "211540"] [msg "COMODO WAF: Blind SQL Injection Attack"] [data "Matched Data: object_name found within ARGS_NAMES:object_name: object_name"] [severity "CRITICAL"] [hostname "website domain here"] [uri "/shop/index.php"] [unique_id "U@vaQdmTUB4AADSrpOoAAAAC"]
=============================

I have disabled mod-securty for your domain now.

i hope this helps anyone which the same problem

[DanFronckowiak]

I was having a similar problem.

I researched and couldn't find much in the way of a solution, so I just went into the database, and used the resource tables to add them manually.

Once I did that, the blue button came back and I was able to add images through the Admin panel.

It's good to know that a quick setting change by the host can fix it. Thanks!

[shaun31]

it was driving me loopy - i thought i was going to lose all my hard work when i had nearly finished the site - i just hope it saves other people time

[kenshin1985]

Thanks alot, this posts helped me alot. mod-security was enabled and blocked everything.
contacted helpdesk and they disabled it. works like a miracle!