how to remove 403 error

Question

Everytime I try to access this url http://mysite.com/somefile.php?url=http://google.com

I get Forbidden error, how I can solve this issue using .htaccess file. I am on shared hosting so all I can do it edit the .htaccess file and nothing else. Please tell me solution that can be implemented using the .htaccess file.

If I try to access http://mysite.com/somefile.php?url= , then it works fine, I cant add some url after = . — hsinxh, Jul 29 '11 at 07:49
it didn't work http://mysite.com%2Fsomefile.php?url=http://google.com — hsinxh, Jul 29 '11 at 08:01
Not **that** slash -- the others in query string: `http:%2F%2Fgoogle.com` .. although it should work without encoding anyway. — LazyOne, Jul 29 '11 at 08:49
the others were already encoded, The thing is I cannot use any url after the "=" — hsinxh, Jul 29 '11 at 09:05
Please contact your hoster -- maybe they have some special security restrictions in place. I personally see no obvious reasons why it should not work. — LazyOne, Jul 29 '11 at 09:13
I can just see the error logs via cpanel, and there is not much information about error. — hsinxh, Jul 29 '11 at 15:27

score 1 · Accepted Answer · answered Aug 18 '11 at 21:31

You're probably getting bitten by your hosting provider's mod_security rules; the pattern of your URL is a common one associated with attempting to exploit PHP file include vulnerabilities, which are (still, unfortunately) one of the most common and easy to exploit vulnerability classes.

You can talk to your provider, or fix your application.

how to remove 403 error

1 Answers1