HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


[Resolved] More help please

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#94299 (In Topic #18808)
Avatar

Fan in action

Can't put site online

Hi.

I used the auto-upload method to put ocPortal onto a test site and configure its own settings.
I elected to have my test site offline whilst I got used to ocPortal.
I have just tried to make my site live again and I get the following error message:

-------------------------------------------------------------------------------

GET to /adminzone/index.php not supported.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

-------------------------------------------------------------------------------

I can't seem to find a way past this and the site remains offline.

I've reported this in the Report Issues area, but I would appreciate some help if anyone knows how to fix this.

Happy New Year all.


Last edit: by WurliTzerwilly

Regards,

Alan.
Back to the top
 
Posted
Rating:
#94304
Avatar

"auto-upload" – do you mean the quick installer?

"offline"/"live" – do you mean "closed" in ocPortal, or offline via some other means?

Is this your own server, or web hosting?

Did that error message happen after you did something, or just start happening when you came back later?

Are you sure you're using the same URL you used before, and that you haven't moved your domain name or something like that?


But short answer, this won't be a bug, it will be some issue on the web host. Assuming you are using web hosting, it would be best to ask them.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#94305
Avatar

I noticed in your bug report (which I've closed, as this won't be a bug) you said it happened when "Any attempt to put the site back online.".

Your web host may be using modsecurity which basically adds annoying rules that arbitrarily breaks sites. If you talk to them they should be able to diagnose it properly.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#94308
Avatar

Fan in action

Hi Chris.

Thanks for the reply.

Sorry about the terminology, I'm very new to CMS, having built and run several websites via HTML/CSS/FTP.

Auto upload, I mean quick install (as recommended).

Online/offline, I mean open to public or closed (for development).

The error message seemed to appear only after I attempted to 'open' the site via the Adminzone/Setup/Configuration/Site options menu.

It appears that at present I simply can't save Configuration via this method, regardless of what parameters I'm attempting to change.

I have partly resolved the situation by using the Adminzone/Setup/Setup wizard method and the site is now public again. However, I'm not sure this is really the best method. :)

Yes, it's web hosting in my own private area and I haven't moved domain or any page pointers.

I've also checked the host error logs and I see that there are entries for file not found: 404.shtml
and
robots.txt

I presume that they would normally have been installed by the ocPortal installer initially?
I certainly haven't deleted them. I guess the 404 missing would account for the 2nd error message?

I can contact my web host, but it seems strange that one method of access works and the other doesn't. However, of course I must bow to your superior knowledge. :)




Regards,

Alan.
Back to the top
 
Posted
Rating:
#94310
Avatar

Apache often complains about missing custom error pages, but don't take that too seriously. It just means that it has to show an error itself rather than through a custom error page.

This is almost certainly modsecurity. If there is HTML in any config options, it thinks you're a hacker – but of course, any CMS admin needs to be able to work with HTML, so it's silly. The web host will need to sort it out.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#94314
Avatar

Community saint

WurliTzerwilly said

It appears that at present I simply can't save Configuration via this method, regardless of what parameters I'm attempting to change.
Are file/directory permissions set correctly?

Steve
Back to the top
 
Posted
Rating:
#94317
Avatar

Fan in action

Hi Steve.

I presumed that when ocPortal installed itself, it would do that automatically, given carte blanche privileges.

I'm not sure where the permissions would normally be set or which files/directories need altering.

The web host has a Webdisk utility which makes the entire installation look like another network drive on my local PC. Using that, I see that the first directory (adminzone) is set to Read-only and there are only 3 categories - Read-only, Hidden and Archive. Am I right in presuming that unsetting Read-only would probably grant the necessary access?

Sorry to sound green, but I've not had to deal with this in web hosting before. Normally I would just FTP upload HTML/CSS and it would work. :)

Regards,

Alan.
Back to the top
 
Posted
Rating:
#94320
Avatar

Community saint

Take a lokk at ocPortal Tutorial: Basic Installation - ocPortal.com

I think you'll find it all explained in there.

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#94321
Avatar

^ I think you should get the webhost to look at what I said first ;).


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#94322
Avatar

Community saint

sholzy said

WurliTzerwilly said

It appears that at present I simply can't save Configuration via this method, regardless of what parameters I'm attempting to change.
Are file/directory permissions set correctly?

Chris - Would modsecurity cause a problem with being able to save changes to >Setup >Configuration >[settings]? Just curious.

Steve
Back to the top
 
Posted
Rating:
#94323
Avatar

Fan in action

Good point Chris, I will do that. Just getting round to it. :)

Thanks Fletch, I just needed the pointer.

Regards,

Alan.
Back to the top
 
Posted
Item has a rating of 5 (Liked by sholzy)  
Rating:
#94324
Avatar

sholzy said

sholzy said

WurliTzerwilly said

It appears that at present I simply can't save Configuration via this method, regardless of what parameters I'm attempting to change.
Are file/directory permissions set correctly?

Chris - Would modsecurity cause a problem with being able to save changes to >Setup >Configuration >[settings]? Just curious.


It all depends on what rules modsecurity has, when it is configured to apply them, and its configured scoring system. Often any form-submitted HTML will trigger it, and some config options are in HTML. Sometimes modsecurity fires 404 errors instead of 500 errors, presumably to not let a hacker know they've been logged. It all makes perfect sense for sysadmins who know what they are doing (modsecurity was designed with these people in mind), but webhosts just install it without there being the necessary rule tuning, with no opportunity to define special cases, etc.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#94326
Avatar

Fan in action

Chris.

I've submitted a support ticket to my ISP.

I'll let you know what they have to say, asap.

Regards,

Alan.
Back to the top
 
Posted
Rating:
#94330
Avatar

Community saint

Another pointer …

I feel your pain. Had something similar with my previous hosts, and when they wouldn't (or couldn't) change - I was forced to. Change hosts, that is!

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#94331
Avatar

Fan in action

Hi Fletch.

Thanks for the pointer.

Unfortunately, the ISP has concentrated on telling me how to change file/directory permissions, which I have already checked (they are correct) rather than addressing the mod_security issue.

I've just added to the support ticket, pointing them to the link you've sent and requesting that they carry out the recommendations in it.

Regards,

Alan.
Back to the top
 
Posted
Rating:
#94332
Avatar

Community saint

WurliTzerwilly said

I've just added to the support ticket, pointing them to the link you've sent and requesting that they carry out the recommendations in it.
That was my intention.

Hosts tend to use a 'one-size-fits-all' approach, and often I think they don't have a choice as they have diverse users who could accidentally or inadvertently put the server at risk.

However, when given solid facts, as in the ocP article (thanks to temp1024 and Chris for the compilation), they often wise up sufficiently to make the 'right' adjustments.

I hope they do that in your case, but you could start out by changing those file permissions. Tedious, but it gets the job done ultimately.

Good luck.

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#94333
Avatar

Fan in action

Hi Fletch.

Let's hope they will comply over mod_security. I hope I don't have the same issues when I install ocPortal on another server for a different website, as they are totally different ISPs, although they do appear to be using the same software/facilities.

I did set all of the file permissions as recommended, but unfortunately it didn't cure the issue. As it happens, nearly all of them were set correctly in the first place. Proving that ocPortal did the correct config when it installed.

Regards,

Alan.
Back to the top
 
Posted
Rating:
#94336
Avatar

Fan in action

Hi again Fletch.

Well it looks as if I've come up against a brick wall with the ISP. They say they can't disable mod_security due to other users on the server.

What they're saying is that they've located the modsec rule that appears to be getting flagged and whitelisted that specific rule for my domain.

Unfortunately it hasn't resolved the issue.

One thought is that maybe by domain, they mean the main hosting domain, which may not affect the other domains I have with them. I need to check.

Regards,

Alan.
Back to the top
 
Posted
Item has a rating of 5 (Liked by Fletch)  
Rating:
#94337
Avatar

Community saint

WurliTzerwilly said

Hi again Fletch.

Well it looks as if I've come up against a brick wall with the ISP. They say they can't disable mod_security due to other users on the server.
You don't want them to disable mod_security.,

WurliTzerwilly said

What they're saying is that they've located the modsec rule that appears to be getting flagged and whitelisted that specific rule for my domain.

Unfortunately it hasn't resolved the issue.
Thats 1 down and 40 more to go. Tell them to whitelist all of the following for your domain:

300076 340007 340011 340014 340016 340017 340021 340027 340029 340095 340113 340118 340128 340131 340133 340144 340147 340148 340149 340157 340159 340164 350147 350148 380006 380018 380019 380020 380021 380800 390707 390708 390709 390715 390727 390801 390810 390904 393449 950801 973331

They have to do them all. They have been well researched and cover all known mod_security issues to date.

Do you have a Samsung Galaxy S / Galaxy S II ? If so, why not check out my ScreenFree FM Radio .
Back to the top
 
Posted
Item has a rating of 5 (Liked by Fletch)  
Rating:
#94339
Avatar

Fan in action

Hi again.

Well, we have a result. I'm not sure why they thought I wanted the rules removed for the entire server, unless they misinterpreted the page I sent them a link to. Anyway, it appears that they had only whitelisted for one domain and they've now done it for all of my domains, which includes the one I've been having issues with.

I can now save Config without issues (so far). :thumbs:

I've requested that they whitelist all of the rules you have listed, which may keep them busy for a few minutes. :lol:

Many thanks for all assistance on this issue, much appreciated. I think we can mark this one as Resolved!

I've saved the list of rules so that if I run into the same issues with the other ISP/site I have to deal with (ocPortal not installed yet) I can simply submit a ticket and hope they will also comply.


Regards,

Alan.
Back to the top
 
There are too many online users to list.
Control functions:

Quick reply   Expand