Gridbox + HTProtect

Enrico

Hi, I'm having a problem with one of the five websites that use HTProtect. I can't save changes to pages or load images (Gridbox/Balbooa). I reinstalled the original .htacess file and it works now. The problem is with HTProtect protection. It's strange that the other websites don't have this problem.

Is it possible to fix this?

Thanks, Enrico

Pascal

Hi Enrico,

What does the browser console say? Right-click -> Inspect or hit F12.

Does rewriting the shield help? Maybe the others got automatically detected/approved.

Otherwise, you could compare the .htaccess files between a working and a non-working site.

Edit: Found the cause - will get back to you shortly.

Cheers
Pascal

Pascal

Please check if this works.

Install and open the component once - the .htaccess will be automatically rewritten.

htprotect-shield-2617.zip

1MB

Enrico

It doesn't work, the problem is there but I can't find it...

archivio.zip

11kB

Pascal

Have you tried the attached 2.6.17 test build?

Because both say generated by 2.6.16.

You can also disable individual rules (but please test 2.6.17 first, since there shouldn’t be any FPs with it): In HTProtect, open the advanced shield, go to the "Exploit Shield" section, and disable the single rule "Balbooa Gridbox: unauth. file read (uploader.showImage)".

If it still doesn’t work, you can always send me temporary Zugang senden – it’s way easier to solve issues practically than just theoretically.

Enrico

Yes, I tried it...

Enrico

I'll do some more testing tomorrow if I can. Thanks!

Pascal

You can test it with these rules disabled.

Alternatively, you could send me the log entry for the 403 – or the URL that returns the 403 in the browser console's network tab. Then I can see what's actually being blocked.

Otherwise, I can only solve it with access. I have no issues on my Gridbox test setup.