Getting "Access Denied" on Today's Posts and What's New?

[TamiTaylor]

I'm getting "Access Denied" on Today's Posts and What's New?

Other report links or tabs seem ok but those two result in a screen that is entirely white with just the words "Access Denied." on them.

I am trying to search the forums for help but not having luck with this issue. Any help is appreciated.

site: http://creativepassionclasses.com/forums/

[kh99]

It seems to be your search.php script that's causing that error, but to be honest I don't know exactly what causes that. Maybe look at the file permissions on search.php?

[ForceHSS]

looks like a custom hook

[TamiTaylor]

do I have any recourse to fix it? obviously reinstalling would but is there a way to reinstall without losing any posts/user info? Can i just recopy the search.php ?

[ForceHSS]

Support ticket let vb fix it would be ur best bet

[kh99]

...or contact your host and ask them about it. It looks like something that's coming from somewhere other than vbulletin.

[TamiTaylor]

Thanks. vBulletin confirmed it was a server issue, but hostgator is saying it's a software issue. I'm submitting a ticket with hostgator now in chat they said it could be a file permission issue but I have no idea what file would be the bugger. Is there a list of what files should have what permissions or?

[kh99]

I'd check search.php.

[TamiTaylor]

that's a 644 like the rest of the search files. I got this from my server help ticket:


When running the search.php from command line, it simply gives an 'Access denied.' message:

root@cre [/home/cp0774/public_html/forums]# php search.php
Access denied.

Using strace to follow the system calls that are made, it seems that the last file opened is forums/vb/search/core.php:

open("/home/cp0774/public_html/forums/vb/search/core.php", O_RDONLY) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=17802, ...}) = 0
open("/home/cp0774/public_html/forums/vb/search/core.php", O_RDONLY) = 6
fstat(6, {st_mode=S_IFREG|0644, st_size=17802, ...}) = 0

And the first line in this file is:

root@cre [/home/cp0774/public_html/forums]# head -1 vb/search/core.php
<?php if (!defined('VB_ENTRY')) die('Access denied.');

This is where the error is coming from. Unfortunately, we aren't familiar enough with vbulletin to know why VB_ENTRY is not defined, or where it should be defined. That's something that the developers will need to help you with, however, you know where the problem is, just not what the problem is, and that should go a long way towards getting this resolved.

Does this help? I'm so sorry I just do not understand. Thank you for all of the help.

[Lynne]

What version of PHP are you using? And what is showing up in your error_logs (if you don't know where they are, ask your host)?

This may help? https://www.vbulletin.com/forum/showthread.php/371767-New-post-search-returning-blank-white-pages-%28no-errors-indicated%29

[TamiTaylor]

Thanks Lynne!

[betterthanyours]

You might want to ask the host to check mod_security logs. I came across this before and if I remember correctly, mod_security was tripped too many queries or searches or something.

[TamiTaylor]

Here's the response from my server:

There is actually no error produced in the logs related to this. Here is a sample access:

[06/Sep/2012:09:32:03 -0700] "GET /forums/search.php?do=getdaily&contenttype=vBForum_Post HTTP/1.1" 200 14 "http://creativepassionclasses.com/forums/" "Mozilla/5.0 (X11; Linux i686; rv:6.0.2) (dbLJyC15qmJHHYNkZdRLuzxZA0x001HEUY/kyz1O+pI=) Gecko/20100101 Firefox/6.0.2"

Your server is currently utilizing PHP 5.2.17:

PHP 5.2.17 (cgi-fcgi) (built: Nov 1 2011 22:58:38)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
with the ionCube PHP Loader v4.0.9, Copyright (c) 2002-2011, by ionCube Ltd., and
with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend Technologies

[kh99]

Did you make any changes to your site before this started?

[snakes1100]

Here's the response from my server:


There is actually no error produced in the logs related to this. Here is a sample access:

[06/Sep/2012:09:32:03 -0700] "GET /forums/search.php?do=getdaily&contenttype=vBForum_Post HTTP/1.1" 200 14 "http://creativepassionclasses.com/forums/" "Mozilla/5.0 (X11; Linux i686; rv:6.0.2) (dbLJyC15qmJHHYNkZdRLuzxZA0x001HEUY/kyz1O+pI=) Gecko/20100101 Firefox/6.0.2"

Your server is currently utilizing PHP 5.2.17:

PHP 5.2.17 (cgi-fcgi) (built: Nov 1 2011 22:58:38)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
with the ionCube PHP Loader v4.0.9, Copyright (c) 2002-2011, by ionCube Ltd., and
with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend Technologies


Tami
1. cd to the dir that the file is in via ssh cmd line
2. issue this cmd
3. lsattr search.php

Whats the results?

[TamiTaylor]

kh99 - the only changes I made were when I had an issue with my own admin account. I accidently made me a registered user. So i went into myphpadmin and changed myself back. that's all.

snakes1100 -
I'm sorry but I dont understand those directions. I have a very limited knowledge of this coding.

I really appreciate everyone helping. I did realize I have other Access Denied issues, I can not make threads sticky either (I hadn't tried before today) when I do I get the same Access Denied error. So I'm assuming it's more than just a search issue?

--------------- Added 1347144952 at 1347144952 ---------------

betterthanyours - I heard back from hostgator and no mod_security errors either.

--------------- Added 1347145068 at 1347145068 ---------------

Would reinstalling do anything? Will I lose history?

[Lynne]

So the host says no mod_security at all (there is also mod_security2)? How about suhosin?

[snakes1100]

Suhosin wont cause a msg to be printed out.

[Lynne]

Suhosin wont cause a msg to be printed out.
I didn't know that. Thanks for letting me know. :)

[snakes1100]

As well by default, suhosin errrors go to the syslog/message log, not nginx/apache etc...

[TamiTaylor]

Thanks to Snakes1100 this is fixed.

[Lynne]

What was the problem/solution?

[TamiTaylor]

the problem was me I didn't pay attention to version numbers so I had a file that was for the update and i was still running a previous version. - yes i was properly scolded.
:)

[Lynne]

Well, you learned a lesson that most of us learn the hard way. :)