Intermittent 403 errors

Sim

Some users are sometimes getting 403 when trying to post or during auto save of draft posts. I'm not running any unusual plugins and haven't changed any code. I'm at a loss for the fault, and it has happened on previous versions.

x00

That sounds more like a server misconfiguration. Unless the ajax is getting scrambled.

What browser are you using? Most have an inspect/developer tools. You need to look at network, persist/record and look at XHR/Ajax request of /post/comment /post/discussion to see what the POST parameter sare and what the response is.

As always try disabling plugin to see if any are causing issues.

If you can rule out the framework or plugin it is a server issue.

Sim

Hmm it seems to work if you only post 1 sentence, paragraphs cause the 403. Suggestions?

x00

That sounds more like a server misconfiguration. Unless the ajax is getting scrambled.

What browser are you using? Most have an inspect/developer tools. You need to look at network, persist/record and look at XHR/Ajax request of /post/comment /post/discussion to see what the POST parameter sare and what the response is.

As always try disabling plugin to see if any are causing issues.

If you can rule out the framework or plugin it is a server issue.

Sim

Thanks, here is an attempt to edit a post.

POST http://scarboroughgames.com/forum/vanilla/post/editdiscussion/938 403 (Forbidden)jquery.min.js:4 f.support.ajax.f.ajaxTransport.sendjquery.min.js:4 f.extend.ajaxpost.js?v=2.1.9:96 (anonymous function)jquery.min.js:3 f.event.dispatchjquery.min.js:3 f.event.add.h.handle.i

I've ruled out plugins, could something have the wrong permissions?

x00

I posted here

http://scarboroughgames.com/forum/discussion/939/test

I don't think it is permission issue becuase you wouldn't be able to post at all.

I wonder if it is specific content. Vanilla 401s not 403s so this seem more lower down on the server and text like "Forbidden" is a server default.

I don’t have permission to view that discussion however.

I wonder if certain keywords are triggering a security layer.

What is the content you are trying to post?

Sim

Due to popular demand I'm organising an escalation tournament for Thursday 16th/23rd. To register either reply here or get in touch with me.

The tournament format is 4 rounds, with a final between the top 2 or 4 players depending on turn out. The first 3 rounds are on the 16th, the rest the following Thursday. Rounds will last 40, 60, 90 and 120 minutes respectively.

To join you will need 4 lists, of 60, 90, 120 and 150 points. Each list must contain everything from the previous list. Unused points can be carried forward in to the next list. 60 point lists must contain it least 2 ships.

Lists should be given to me between the 9th and 15th. I will publicise my own list on here before I accept submissions.

Escalation scoring means the later games can be worth more in MoV than earlier ones, which is used for tie breaking. For more information see:

Escalation - https://images-cdn.fantasyflightgames.com/filer_public/c7/6f/c76f220b-5efd-4afc-912b-e67dfcda034e/x-wing_escalationrules_v301.pdf

NEW! FAQ - https://images-cdn.fantasyflightgames.com/filer_public/9d/df/9ddf0774-9bbc-4eab-89bf-01a9c4ef7eca/x-wing-faq.pdf

I have tried removing the URLs, and slimming the content. The first 2 sentences pass.

I tried this and it works up to but not including the word 150.

Due to popular demand I'm organising an escalation tournament for Thursday 16th/23rd. To register either reply here or get in touch with me.

Lists should be given to me between the 19th and the 15th. I will publsh my list here before accepting submissions. To join you will need 4 lists, of 60, 90, 120 and 150

x00

I'm getting

You sir, at **.***.***.*** have prompted a 403 ERROR. We are looking in to this nightmare right now If this continues please go outside and enjoy the sunshine instead.

This implies it is server security, not vanilla.

this also triggers the issue 40, 60, 90 and 120 and 90 and 150 and and 150 and and 1 it appears to be an anti-spam measure false positive.

x00

It can also be a crudly though out SQL injection protection.