Questions tagged [403-forbidden]
403 is a HTTP status code that tells the user/application that they do not have permission to access the requested document/webpage.
80
questions
5
votes
1
answer
670
views
AH10411: Rewritten query string contains control characters or spaces
How to reproduce the error:
-- A space in my URL will trigger the error.
Observation of the error:
-- It seems to happen suddenly since around 3/10.
---- I did not upgrade my Apache version, but it ...
- 51
7
votes
1
answer
797
views
RewriteRule started returning 403 Forbidden error
I have a website that uses a set of quite simple RewriteRules of the format:
RewriteRule ^p/(.*)$ /product.php?$1 [L]
All was working well and still is working perfectly fine on localhost. For some ...
- 73
0
votes
0
answers
78
views
Client side "403 Forbidden" error in django app hosted windows server on apache
We have a problem with a web app hosted on an AWS instance.
Lately one specific type forms with its POST requests are failing with a "403 Forbidden" nothing else.
All GET request are OK and ...
- 1
2
votes
1
answer
172
views
When saving with the Wayback Machine, claims "The client does not have access rights" HTTP status=403
I have a WordPress installation which the Wayback Machine can no longer archive. I'm posting this here because I intuit this is a lower level problem.
When visiting
https://web.archive.org/save/blog....
- 151
4
votes
1
answer
47
views
Deny non-local Apache requests that match a specific URL pattern
I need to configure my Apache (2.4) in a way, that It prevents answering requests that
don't come from the same IP as the server
match a specific pattern in the URL
In pseudocode it must look ...
- 171
2
votes
1
answer
35
views
Create a virtual index file to prevent 403s
I'd like to serve (httpd) either 404s or 200s instead of 403s.
I found a way to redirect and change 403s so they become 404s but I'm not trying to replace 403s altogether but rather where they are ...
- 73
4
votes
0
answers
191
views
When Bing requests a sitemap or a robots.txt, why do I see Apache reject the 1st request with a 403, followed immediately by a 2nd successful request?
This is a small issue that has been ongoing for quite some time.
When I check my Apache server log for 403's, all entries are related to Bing, and all from when it requests a robots.txt, sitemap.txt, ...
3
votes
0
answers
422
views
Can I test if my site's URLs have 403 errors for Google Ads Bot?
All URLs in my WordPress site can be visited via browser such as FireFox and Chrome successfully. However, today I receive emails from Google Ads telling me that some of the URLs have errors. The ...
- 439
2
votes
1
answer
296
views
403 Forbidden error for Wordpress login after whitelisting Cloudflare IPs in htaccess
I’m using Cloudflare nameservers and tried to whitelist Cloudflare IPs through htaccess file, but it results in a 403 Forbidden error for my Wordpress login.
Here are the directives I used in ...
- 21
3
votes
1
answer
2k
views
Apache redirect all requests for file type to 404
I have some .inc files that I want blocked from being accessible via web pages. I want to simply redirect them to another page or throw a 404 when those files are accessed.
I have tried this so far ...
2
votes
1
answer
53
views
Why do Google search result webpage link and facebook shared webpage link of my website when clicked shows 403 forbidden error?
I have a website. It is working fine. But since yesterday, If I click on Google Search Result webpage link of my website, then it shows following error:
It appears you don't have permission to ...
- 31
0
votes
0
answers
18
views
cgi problem command line ok but 403 on website
I am running on Debian 9 strech, hello.cgi
on command line
perl -cTw hello.cgi
all is fine
When i try to navigate to the subdirectory I get an error 403.
I add some lines to apache2.conf to ...
- 1
1
vote
1
answer
837
views
How to limit requests to certain domain in nginx?
I have a domain like sub.example.com. I'd like to allow GET access to certain paths uploads only through example.com
Something like this:
location ~ ^/uploads {
allow example.com;
...
- 179
1
vote
2
answers
903
views
403 Error for a JavaScript URL in Search Console
Its a long time Google Search Console show me a 403 Error for below link.
Content/img/static/skins/
I searched this URL in linked from page Html source and even in inspect element browser (maybe ...
- 11
5
votes
2
answers
3k
views
How could I forcibly output the default 403-forbidden error page when http://example.com/not_found is requested?
This is my first question on StackExchange so bear with me, here is a brief breakdown of my current setup:
Two different domains, two different TLDs (.dk and .de) on the same hosting plan
for the ...
- 129
1
vote
1
answer
714
views
Should I be returning a 301 or 403 to a bad referrer in my .htaccess?
Getting several amounts of bad requests from a particular URL such as site.foo and I would like to redirect all these requests to a dedicated page. The .htaccess code I've researched and implementing ...
- 681
0
votes
1
answer
1k
views
Apache FollowSymlinks works in DocumentRoot but 403s in subdirectories
I'm trying to run the Piwigo gallery/digital asset manager on a Raspberry Pi using Apache 2.4 on Arch Linux ARM. Piwigo's running happily. For Windows file naming and CIFS reasons, I need to make ...
- 23
2
votes
1
answer
1k
views
htaccess empty referer deny "google bot"
I put this rule into htaccess file to deny empty referers which is returning 403
SetEnvIfNoCase Referer "^$" bad_user
Deny from env=bad_user
I can see the log, it's denying also Googlebot which ...
2
votes
0
answers
305
views
Google Webmaster query api returning 403 error
We are using php library to fetch webmaster query API data and getting 403 permission denied error while able to fetch the same data using webmaster analytics tool.
The following are the things which ...
- 21
1
vote
1
answer
471
views
Prevent Googlebot from crawling "access denied" error (403) of private forum that are reported in Google Search Console?
I'm running a website base it by vbulletin. Recently I moved one of my forums to a private section of my website so users and googlebot cannot access it there.
Now I'm getting lots of access denied ...
- 11
1
vote
1
answer
89
views
Repeated hits on my site from different IP addresses trying to access .aspx files using all my bandwidth [closed]
I checked my raw access files after being notified that my site has been limited over the last 24 hours and see different IP addresses trying to access files with .aspx extensions, see attached log ...
- 305
2
votes
1
answer
400
views
Which HTTP response status code is most appropriate for a restricted URL?
I have a page on my website that's targeted at logged-in users only. Logged-out visitors shouldn't see the content.
Imagine the page URL is example.com/upload/.
In cases when users aren't ...
- 275
3
votes
2
answers
369
views
Make a file invisible remotely
I have a PHP file that stores some connection info for part of my website. It is not "readable" from the Web, which is good. I.e. it is blank when you navigate to it from the Web.
However, even if it ...
- 666
2
votes
1
answer
1k
views
How to tell Apache to reply with 403 instead of 401?
We have some rules for a subtree of Locations, which involve Require-ing ldap-group and exprs.
The user is duly challenged to supply login-credentials, which are verified.
However, even when the ...
- 123
3
votes
1
answer
401
views
Do 404 and 403 errors listed in Google Search Console affect SEO ranking?
I'm prerendering a Angular app for SEO. When I check in the webmaster tool, there are a few hundred 404 and 403 errors. Will this affect my SEO ranking?
- 31
-1
votes
3
answers
1k
views
.htaccess: DirectoryIndex and 403 forbidden
I am learning .htaccess directives.
To test, I create a new .htaccess file under my Joomla website and a test.html file. Then I put
DirectoryIndex test.html
in the .htaccess file. However, I am ...
- 495
5
votes
1
answer
355
views
Looking for explanation of Apache behavior on manipulating headers
Tried to get an answer at ServerFault - they don't know, all real gurus are sitting here.
The background of the issue: Googlebot creates non-existing URLs and tries to crawl them. On some URLs Apache ...
- 9,954
3
votes
1
answer
10k
views
Is HTTP code 401 or 403 appropriate for when a logged in user is not allowed to view the data?
I am looking for a good way to return an error when an unauthenticated/unauthorised user is trying to get a restricted access content from my site. Currently I ask the user to login, check the ...
- 227
2
votes
1
answer
1k
views
Cakephp 3 installation on Ubuntu doesn't have permission to access index.php
I have installed Cakephp on my ubuntu webserver (well copied it in var/www/html) following this tutorial https://askubuntu.com/questions/628938/how-to-install-cakephp-in-ubuntu-14-04
I am also using ...
- 121
2
votes
2
answers
602
views
Pages are returning a 403 response code and not getting indexed in Google
I am working on a website but not all of its pages are getting indexed in Google. Everything seems fine to me from the URL structure to the canonical tag. However, when I check the pages header ...
- 424
2
votes
1
answer
80
views
Why would a url of example.com/n (where n is the same number repeated 500x) return a 403 error?
I'm trying to add new functionality to my site which involves passing a whole bunch of parameters (could be hundreds of parameters) all encoded in base64 format. When I attempt the new URL I get an ...
- 13.5k
2
votes
3
answers
2k
views
Using .htaccess deny returning 302 and not 403 forbidden
I'm in the process of adding yet another layer of security to some of my WordPress installs, since some of my customers sites use shared hosting, and generally they do not ban users for brute force ...
- 32.8k
2
votes
0
answers
44
views
403 or 301 domain pointing to our domain? [duplicate]
We recently discovered that a large, publicly traded corporation purchased a domain that they have pointing to our domain. Both the corporation and the domain are completely unrelated to our type of ...
- 21
3
votes
3
answers
1k
views
Is it OK to give status 404 to unauthorized users?
In recent months I have come across several sites, which give a 404 status/error page, when there should be 403 or maybe 401.
For example, I have a private repository on github.com with link:
https:/...
- 33
4
votes
1
answer
4k
views
403 when query string parameter contains an encoded URL
I'm using shared hosting with minimal access to any configuration settings.
I've created a more or less empty HTML file, emptypage.html, with the following contents:
<!DOCTYPE html>
<html&...
- 151
2
votes
4
answers
194
views
403s appearing in WMT but when I FETCH GOOGLE returning same URLs as 200
HI there over the last few days Google Webmaster Tools has been showing me 403 errors for a series of URLS. However when i FETCH them they come up as 200 OK and when I look in Google using keywords ...
1
vote
1
answer
7k
views
403 when query string contains a dot (.) character [closed]
EDIT: did more research, asked new question
I dug a bit deeper and realized that the contents of the page are indeed not relevant to this issue. As this question has gotten more and more confusing, ...
- 151
0
votes
0
answers
2k
views
How to allow access to subdirectory in website using htaccess?
I am wanting to create a seperate directory for my analytics program to function.
My website is www.loosebruce.co.uk and I want my directory to be accessible as
www.loosebruce.co.uk/analytics
The ...
- 425
8
votes
2
answers
35k
views
How can I use .htaccess to respond with 403 forbidden status for URLs that contain a query string?
Some bots have been crawling my site for every link that ends with:
?utm_source=dlvr.it&utm_medium=twitter
I haven't checked out its IP.
Then other bots (10+) follow the link rules ?utm_source=...
2
votes
1
answer
158
views
Forbidden access when saving an edited question post using Question2answer script
I installed Question2answer on my paid server. After I published a post/question on my Question2answer site I tried to edit it, but when I was trying to save the post, it outputs an error that says:
...
- 1,310
0
votes
1
answer
68
views
Setting up a second domain to my web server
I have a domain name which points to my web server, and we added a secondary domain for short urls, which points to the same ip address, however with the new domain, it is giving
"Forbidden
You don'...
3
votes
1
answer
60k
views
Forbidden 403 for js file on localhost?
apologies if this isn't the right place to post this. I posted it on Stack Overflow and a user suggested I put it here.
Anyway, I've looked all over google and the site and none of the solutions I've ...
- 33
1
vote
2
answers
980
views
WAMP VirtualHost 403
I recently installed WAMP, and started developing on its Apache server. Given that my text editor (Sublime) didn't have permissions to write on C disk directly, I changed my default DocumentRoot to My ...
- 131
2
votes
1
answer
574
views
Apache 403 error despite group permission
I have a NAS running Linux with a Apache 2.2. I want the apache process (running as user nobody) to run as different group "users" to read some files. I tried the following without success:
in its ...
- 121
3
votes
2
answers
3k
views
403 Error Fetching Image with JS
I've read all the 403-related questions here and elsewhere and I can't find an answer to this question:
When I try to get a particular image on a remote domain via JavaScript I get a 403 error.
But ...
- 201
3
votes
1
answer
813
views
Find origin of the 403 error (not my server)
We are running an Apache server that provides files to several users.
Some users are getting the 403 error when trying to access any download url on our Apache.
I don't see those 403 errors in our ...
- 31
1
vote
1
answer
576
views
"Access denied" error in Google Webmaster tools
I have an access denied problem in my webmaster tools. It says 404 errors.
How can I solve this? I have already fixed the errors, but they are not removed from Google Webmaster Tools.
- 11
2
votes
1
answer
3k
views
Googlebot received Access Denied when crawling a directory
I'm facing the same problem with Googlebot not able to crawl my page. Mine problem doesn't have anything to do with www or not. Google can crawl all my pages except one directory and this directory ...
- 121
0
votes
2
answers
360
views
Website I control is only unavailable on company internet connection (403 error) - workaround? [closed]
a website I control is showing 403 errors only on company machines on their own network.
It's throwing an Access forbidden! error
Error 403
www.example.com Tue Oct 1 Apache mod_fcgid/2.3.7 ...
- 101
1
vote
1
answer
610
views
Can preventing directory listings in WordPress upload folders cause Google ranking drops when they cause 403 errors in Webmaster Tools?
I recently moved to a new host that blocks crawling to my uploads folders but (hopefully) allows the files in the folder to be crawled.
I now show many 403 errors for each folder in the uploads ...
- 11