search

PHPfox-Official / phpfox-v4-issues

phpFox Public Bug Tracker
https://phpfox.com
30 stars 21 forks source link

Trouble installing Apps #126

Closed ojaiweber closed 9 years ago

ojaiweber commented 9 years ago

I've signed up for Github at the request of phpfox. I'm going to try and keep this short and sweet and hope someone can help me:

Issue: Try to install an app on my v4 site I get a 403 Forbidden Error. All apps get this.

Setup: I have a subdomain with the phpfox installed. I have a wildcard ssl on both my core site and the subdomain. I did "enable shorturls" prior to the ssl on the subdomain. I've enabled the options to force users to log into https and I've secured pages with https in the options.

Any help? Are there particular folders/files in the cpanel file manager I should set specific permissions to?

DonnaScriptTechs commented 9 years ago

What are the server logs showing?

ojaiweber commented 9 years ago

I know I'm a bit over my head...but where can I find that? Im in the cpanel now and don't see anything under "error logs"

ojaiweber commented 9 years ago

So if I go to "find more apps" then to "get app" before I get the 403 forbidden error I briefly see fields that look like they may be requesting my phpfox licencse key information. Doing it this way also basically "iframes" the 403 error keeping the admincp menus to the left. If I just try to add the app from the featured app area it 403's full screen.

DonnaScriptTechs commented 9 years ago

Ray is going to need to help you further with this as my sites don't have issues but my sites on V4 are not live sites and not on https.

ojaiweber commented 9 years ago

No problem, thanks for trying. I'm trying to find the logs in phpmyadmin so far no dice. Thank you for trying, I look forward to getting some insights from Ray! He sounds helpful.

DonnaScriptTechs commented 9 years ago

If you disable https settings, does it work?

ojaiweber commented 9 years ago

So far nope.

ghost commented 9 years ago

Not sure if this is related, but when I try to install apps I got an error related to "ModSecurity" being on. I went to cpanel, and searched "ModSecurity" and hit a button to disable it. Doing so I was able to reload the apps page and install/view what I needed. After I was done, I renabled it in cpanel, because it sounds like it's important to have on, and I have no idea what having it off could cause. :P

ojaiweber commented 9 years ago

I don't have that option, but thank you for the input!

Jinkers commented 9 years ago

If you could post some more details (picture maybe of the error?) we should be able to help you some more. As GloriousKoch stated before we had to disable ModSecurity briefly to get ours to work.

ghost commented 9 years ago

I probably should have been more clear as well, just to be sure, @ojaiweber. Did you look for "ModSecurity" in your host's cpanel? Just so you didn't think I meant PHPFox's admin. Also, you may have, but just in case, use the search feature in your host's cpanel as well. There are sometimes options I have that don't show up on the dashboard unless I search for them. :)

ojaiweber commented 9 years ago

Thanks folks! I've attached two error screen captures. The first "error 1" is when I click to get the app from the store part. Error 2 is the screen cap when I try to install straight from the featured app area.

@GloriousKoch I cannot find that even when I search. I'll continue to try and hound it down since it sounds like that's my best option. Obviously from the screen caps you can tell I have hostgator.

Much thanks again. I really do appreciate it.

ghost commented 9 years ago

I'm not sure if its a permissions thing on github, but I can not see your attached images, and no problem. As a fellow PHPfox user, we gotta stick together and help out where we can. Lord knows I've submitted a ton of issues here to make sure we get things in order. :)

ojaiweber commented 9 years ago

Or user error...on my part. Sorry

app error 1 app error 2
ghost commented 9 years ago

Yeah, I use a different host, but that's more or less what I saw on my end. I'd contact HG's support (if I recall from the past they have quick/helpful live chat staff) and ask them where you could find modsecurity settings.

ojaiweber commented 9 years ago

SOLVED rule 123434 whitelisted. thank you all for the help!

ghost commented 9 years ago

Was that the solution or was it another thing? Just curious for others who may have similar issues. :)

ojaiweber commented 9 years ago

Well so I inquired for modrewrite disabling like you said and the help folks then had me trigger the error while "tailing apache" and then they found the rule error. Then they whitelisted that error. They said it was safe to keep it whitelisted.

That's all I know and that's way over my head.

DonnaScriptTechs commented 9 years ago

For anyone else having issues, I'm about to go disable some "apps" that are actually modules and this is breaking sites. Anyone that installed any of the V4 "apps" from Cespiritual, those are NOT apps and will break your site. I'm going to see how to fix this other site and post for the rest of you if you need it.

DonnaScriptTechs commented 9 years ago

Actually, if you get the latest client build or developer build, you should see an error before trying to install any "apps" that are actually not apps. Try updating.

DonnaScriptTechs commented 9 years ago

Is this still an issue?

RaymondBenc commented 9 years ago

When installing apps we provide a very long query parameter in the URL and some hosts with security features will consider this a risk. The URL simply contains a link to download the product, which is very long because it has a time delayed authentication token. We are going to change this instead to a short token that will instead ping our app server for the download URL, however we cannot change this with the next version iteration as it will require a little more testing.