Support Forum

Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
plugins-topic
Subscription and Watches plugins .again..
Avatar
Bayan irhaem
Member
Free Members
sp_UserOfflineSmall Offline
Jul 26, 2012 - 11:31 pm

Mr Papa said

I am getting numerous js errors on this page... especially if I hover over any menu item...

TypeError: a is undefined

http://dl.dropbox.com/u/230673...../jquery.js

Line 2

interestingly when searching, getting errors too:

ReferenceError: AudioPlayer is not defined

http://7gag.co/forum/?search=1.....;include=1

Line 99

almost as if the audio player is intercepting the search url with query args that we have set up...

and when you execute the search, your server if forbidding it... these are the headers:

GET /forum/?search=1&new=1&forum=all&value=stories&type=1&include=1 HTTP/1.1

Host: 7gag.co

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0.1

Accept: text/problem-with-post-edit-buttontml,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-us,en;q=0.5

Accept-Encoding: gzip, deflate

Connection: keep-alive

Referer: http://7gag.co/forum/

Cookie: wfvt_340468725=5011eeed2ecd2; __cfduid=dad7981d378c0efe0648e416e14c5d0451343352454; __utma=134686135.179653261.1343352461.1343352461.1343352461.1; __utmb=134686135.3.10.1343352461; __utmc=134686135; __utmz=134686135.1343352461.1.1.utmcsr=simple-press.com|utmccn=(referral)|utmcmd=referral|utmcct=/support-forum/sp5-plugin-topics/subscription-and-watches-plugins-again/

Cache-Control: max-age=0

HTTP/1.1 403 Forbidden

Server: cloudflare-nginx

Date: Fri, 27 Jul 2012 01:34:29 GMT

Content-Type: text/problem-with-post-edit-buttontml; charset=UTF-8

Connection: keep-alive

X-Powered-By: PHP/5.2.17

X-Pingback: http://7gag.co/xmlrpc.php

Set-Cookie: wfvt_340468725=5011effccf893; expires=Fri, 27-Jul-2012 02:03:48 GMT; path=/

Content-Length: 52399

any idea what on your server might be blocking it??  any chance you are running mod_security??

Hi

am running:

1-WangGuard

2-Wordfence Security

I removed all audio player code..so no error now.

I deactivate both of them...but i still have same errors.

I will keep them Deactivated until you check by your self.

Thank you

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 9:39 am

but what about mod_security?  that would be an apache module on your server not wp related...

so any thoughts on why your server would be throwing a 403 forbidden error on that url??  might be worth consulting your host too...

Avatar
Bayan irhaem
Member
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 3:58 pm

Mr Papa said
but what about mod_security?  that would be an apache module on your server not wp related...

so any thoughts on why your server would be throwing a 403 forbidden error on that url??  might be worth consulting your host too...

Hi...they said nothing there...

And asked me more details about the error: so please tell me what to ask them and what is the error?

And what about Subscribe and watch plugins? why they not saving request or even working?

Thank you

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 4:04 pm

could all be related...  solve one, may solve all...  one at a time...

its like your server is rejecting urls with some query args...  like mod_security often does by mistake...

I would start by showing them post 11 and the http headers I captured... namely the 403 denied and see if they can tell why...

Avatar
Bayan irhaem
Member
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 5:45 pm

please take a look at .htaccess

but even when i restored the original one..the error stil there.

Options -Indexes

<Files ~ "^.*.([Hh][Tt][Aa])">

order allow,deny

deny from all

satisfy all

</Files>

<files wp-config.php>

Order deny,allow

Deny from all

</files>

# BEGIN W3TC Browser Cache

<IfModule mod_deflate.c>

<IfModule mod_setenvif.c>

BrowserMatch ^Mozilla/4 gzip-only-text/problem-with-post-edit-buttontml

BrowserMatch ^Mozilla/4.0[678] no-gzip

BrowserMatch bMSIE !no-gzip !gzip-only-text/problem-with-post-edit-buttontml

BrowserMatch bMSI[E] !no-gzip !gzip-only-text/problem-with-post-edit-buttontml

</IfModule>

<IfModule mod_headers.c>

Header append Vary User-Agent env=!dont-vary

</IfModule>

<IfModule mod_filter.c>

AddOutputFilterByType DEFLATE text/css application/x-javascript text/x-component text/problem-with-post-edit-buttontml text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/x-icon

</IfModule>

</IfModule>

<FilesMatch ".(css|js|htc|CSS|JS|HTC)$">

FileETag None

<IfModule mod_headers.c>

Header set X-Powered-By "W3 Total Cache/0.9.2.4"

</IfModule>

</FilesMatch>

<FilesMatch ".(html|htm|rtf|rtx|svg|svgz|txt|xsd|xsl|xml|HTML|HTM|RTF|RTX|SVG|SVGZ|TXT|XSD|XSL|XML)$">

FileETag None

<IfModule mod_headers.c>

Header set X-Powered-By "W3 Total Cache/0.9.2.4"

</IfModule>

</FilesMatch>

<FilesMatch ".(asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|xla|xls|xlsx|xlt|xlw|zip|ASF|ASX|WAX|WMV|WMX|AVI|BMP|CLASS|DIVX|DOC|DOCX|EOT|EXE|GIF|GZ|GZIP|ICO|JPG|JPEG|JPE|MDB|MID|MIDI|MOV|QT|MP3|M4A|MP4|M4V|MPEG|MPG|MPE|MPP|OTF|ODB|ODC|ODF|ODG|ODP|ODS|ODT|OGG|PDF|PNG|POT|PPS|PPT|PPTX|RA|RAM|SVG|SVGZ|SWF|TAR|TIF|TIFF|TTF|TTC|WAV|WMA|WRI|XLA|XLS|XLSX|XLT|XLW|ZIP)$">

FileETag None

<IfModule mod_headers.c>

Header set X-Powered-By "W3 Total Cache/0.9.2.4"

</IfModule>

</FilesMatch>

# END W3TC Browser Cache

# BEGIN W3TC Page Cache core

<IfModule mod_rewrite.c>

RewriteEngine On

RewriteBase /

RewriteRule ^(.*/)?w3tc_rewrite_test$ $1?w3tc_rewrite_test=1 [L]

RewriteCond %{HTTP:Accept-Encoding} gzip

RewriteRule .* - [E=W3TC_ENC:_gzip]

RewriteCond %{REQUEST_METHOD} !=POST

RewriteCond %{QUERY_STRING} =""

RewriteCond %{HTTP_HOST} =7gag.co

RewriteCond %{REQUEST_URI} /$ [OR]

RewriteCond %{REQUEST_URI} (sitemap(_index)?.xml(.gz)?|[a-z0-9_-]+-sitemap([0-9]+)?.xml(.gz)?) [NC]

RewriteCond %{REQUEST_URI} !(/wp-admin/|/xmlrpc.php|/wp-(app|cron|login|register|mail).php|/feed/|wp-.*.php|index.php) [NC,OR]

RewriteCond %{REQUEST_URI} (wp-comments-popup.php|wp-links-opml.php|wp-locations.php) [NC]

RewriteCond %{HTTP_COOKIE} !(comment_author|wp-postpass|wordpress_[a-f0-9]+|wordpress_logged_in) [NC]

RewriteCond %{HTTP_USER_AGENT} !(W3 Total Cache/0.9.2.4) [NC]

RewriteCond "%{DOCUMENT_ROOT}/wp-content/w3tc/pgcache/%{REQUEST_URI}/_index%{ENV:W3TC_UA}%{ENV:W3TC_REF}%{ENV:W3TC_SSL}.html%{ENV:W3TC_ENC}" -f

RewriteRule .* "/wp-content/w3tc/pgcache/%{REQUEST_URI}/_index%{ENV:W3TC_UA}%{ENV:W3TC_REF}%{ENV:W3TC_SSL}.html%{ENV:W3TC_ENC}" [L]

</IfModule>

# END W3TC Page Cache core

# BEGIN WordPress

<IfModule mod_rewrite.c>

RewriteEngine On

RewriteBase /

RewriteRule ^index.php$ - [L]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule . /index.php [L]

</IfModule>

# END WordPress

<IfModule mod_security.c>

<Files async-upload.php>

SecFilterEngine Off

SecFilterScanPOST Off

</Files>

</IfModule>

<IfModule mod_headers.c>

# Cache files

<FilesMatch ".(ico|pdf|flv|jpg|jpeg|png|gif|swf|css|js)$">

Header set Cache-Control "max-age=2592000"

Header set Expires "Mon, 20 Apr 2015 20:00:00 GMT"

Header unset Last-Modified

</FilesMatch>

# BEGIN GZIP

<ifmodule mod_deflate.c>

AddOutputFilterByType DEFLATE text/text text/problem-with-post-edit-buttontml text/plain text/xml text/css application/x-javascript application/javascript

</ifmodule>

# END GZIP

RewriteEngine On

# proc/self/environ? no way!

RewriteCond %{QUERY_STRING} proc/self/environ [OR]

# Block out any script trying to set a mosConfig value through the URL

RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [OR]

# Block out any script trying to base64_encode crap to send via URL

RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]

# Block out any script that includes a <script> tag in URL

RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]

# Block out any script trying to set a PHP GLOBALS variable via URL

RewriteCond %{QUERY_STRING} GLOBALS(=|[|%[0-9A-Z]{0,2}) [OR]

# Block out any script trying to modify a _REQUEST variable via URL

RewriteCond %{QUERY_STRING} _REQUEST(=|[|%[0-9A-Z]{0,2})

# Send all blocked request to homepage with 403 Forbidden error!

RewriteRule ^(.*)$ index.php [F,L]

Thank you

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 5:50 pm

those are not error per se...  but are http headers... so you need to watch/capture the http headers and responses as the site loads...

with Firefox, best add tool is Live HTTP Headers...

Avatar
Bayan irhaem
Member
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 6:10 pm

BTW...i use https://www.cloudflare.com as CDN

BUT i made all Security profile options "OFF"....

I really don't know what to do else...!!!!

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 6:28 pm

A bit lost too... but something on your server is rejecting the URI... did you ever ask your host?

Avatar
Bayan irhaem
Member
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 6:32 pm

Mr Papa said
A bit lost too... but something on your server is rejecting the URI... did you ever ask your host?

I asked..and waiting for answer...

What about Subscribe and watch plugins? why they not saving requests? 

Note: When restored .htaccess i got this error:

Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at 7gag.co Port 80 

what this mean?

thank you

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Jul 27, 2012 - 6:58 pm

I answered with my thoughts on that last time you asked... Since they send query args to the URL, its likely the same thing... and want to handle one issue at a time...

If I get a chance later tonight, I can look at the http headers and see if getting the same 403 denied http response.... suspect so since it redirects to home page... subscribing or watching will reload the same page which indicates to me that the query args are getting stripped/ignored just like on the search URI...

Forum Timezone: Europe/Stockholm
Most Users Ever Online: 1170
Currently Online:
Guest(s) 1
Top Posters:
Mr Papa: 19448
Ike: 2086
Brandon: 864
kvr28: 804
jim: 650
FidoSysop: 577
Conrad_Farlow: 531
fiddlerman: 358
Stefano Prete: 325
Member Stats:
Guest Posters: 619
Members: 17363
Moderators: 0
Admins: 4
Forum Stats:
Groups: 7
Forums: 17
Topics: 10127
Posts: 79625