Quote:
Originally Posted by paradoxG(r)eek
As a second thought. That "Forbidden" indicates server error. Can you please check if the file video_usercp.php is CMOD 644 ? If it is (which is the normal), try to change it to 666. Just for testing purposes. If it works then bring it back to 644 and contact your hosting provider.
If it's not 644, then change it to 644
|
Christos this is the problem,
Code:
ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\biframe\\\\b.*?\\\\bsrc\\\\b" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/07_XSS_XSS.conf"] [line "198"] [id "212650"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.xxxxxxxxx.com|F|2"] [data "Matched Data: http:/ found within REQUEST_COOKIES_NAMES:bb_cpsession: <iframe width=\\x22750\\x22 height=\\x22400\\x22 src=\\x22//www.youtube-nocookie.com/embed/xxxxxxxxxx?showinfo=0&rel=0&iv_load_policy=3&modestbranding=1\\x22 frameborder=\\x220\\x22 allowfullscreen></iframe>"] [severity "CRITICAL"] [hostname "www.xxxxxxxxx.com"] [uri "/video_usercp.php"] [unique_id "xxxxxxxxxxxxxxxxxxxx"]
I put the id to my server as security rule and now it works. I do not know if it is ok.
I do not know if the id will change and have problem again, COMODO Firewall sees something that does not like
Thank you for advises