Android Question mod security error 403??

ilan · Sep 2, 2015

yesterday i get a mail from my server provider

Dear Customer,

Please be advised that the following Windows hosting servers will be undergoing maintenance as per the schedule and reason mentioned below.

Reason:

To enable mod_security rules to increase the security on the servers.

after that update my apps cannot download text files from my server. i am using HttpUtills2Service to download the file and read the text with job.GetString. until yersterday it worked fine but now i get an error:

** Activity (main) Create, isFirst = true **
** Activity (main) Resume **
** Activity (main) Pause, UserClosed = true **
** Activity (menu) Create, isFirst = true **
** Activity (menu) Resume **
** Service (httputils2service) Create **
** Service (httputils2service) Start **
** Service (httputils2service) Start **
JobName = Job6, Success = true
JobName = Job1, Success = true
http://sagital.net.208-91-198-176.plesk-web15.webhostbox.net/lists/0504844663.txt
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>IIS 7.5 Detailed Error - 403.0 - ModSecurity Action</title>
<style type="text/css">

</style>

</head>
<body>
<div id="header"><h1>Server Error in Application "SAGITAL.NET"</h1></div>
<div id="server_version"><p>Internet Information Services 7.5</p></div>
<div id="content">
<div class="content-container">
<fieldset><legend>Error Summary</legend>
<h2>HTTP Error 403.0 - ModSecurity Action</h2>
<h3>You do not have permission to view this directory or page.</h3>
</fieldset>
</div>
<div class="content-container">
<fieldset><legend>Detailed Error Information</legend>
<div id="details-left">

<table border="0" cellpadding="0" cellspacing="0">
<tr class="alt"><th>Module</th><td>ModSecurity IIS (32bits)</td></tr>
<tr><th>Notification</th><td>BeginRequest</td></tr>
<tr class="alt"><th>Handler</th><td>StaticFile</td></tr>
<tr><th>Error Code</th><td>0x00000000</td></tr>

</table>
</div>
<div id="details-right">
<table border="0" cellpadding="0" cellspacing="0">
<tr class="alt"><th>Requested URL</th><td>http://sagital.net.208-91-198-176.plesk-web15.webhostbox.net:80/lists/0504844663.txt</td></tr>
<tr><th>Physical Path</th><td>D:\inetpub\vhosts\sagital.net\httpdocs\lists\0504844663.txt</td></tr>
<tr class="alt"><th>Logon Method</th><td>Not yet determined</td></tr>
<tr><th>Logon User</th><td>Not yet determined</td></tr>

</table>
<div class="clear"></div>
</div>
</fieldset>
</div>
<div class="content-container">
Message longer than Log limit (4000). Message was truncated.
JobName = listdown, Success = false
Error: ModSecurity Action

what can i do to solve this problem?? i tried to contact my server provider but they are really dump. they say everything is fine on their side and they need a screenshot of the msg i get even i sent them the error msg they still want to see a screenshot...

can someone please help me? some of my apps are not working now because of that...

thanx

giga · Sep 3, 2015

A 403 error on IIS usually means security related issue on the server or permission denied to that directory. If you have access to that directory check permissions settings.

ilan · Sep 3, 2015

giga said:
A 403 error on IIS usually means security related issue on the server or permission denied to that directory. If you have access to that directory check permissions settings.

thank you for your help, i did what you said (i guess i did

)

is this ok like this:

but still after update the permission i am not able do download, could it be that it takes time until the setting will effect??

sorex · Sep 3, 2015

it should be direct, read should be enough tho.

can you pm the link?

sorex · Sep 3, 2015

I can access some of the files with firefox tho
http://www.sagital.net/lists/0524465487.txt
0524465487.txt
0543545053.txt
files.php
newweb.txt

etc

ilan · Sep 3, 2015

yes i can too, but when i try to use Http in my app to download it and get string from the text file job fails...
and i get this error http://www.sagital.net/er1.jpg

EDIT: btw it worked perfect before they did and server security update on 1/9/2015 (2 days ago) so it has something to do with that

sorex · Sep 3, 2015

and it also works from in an android app.

ilan · Sep 3, 2015

sorex said:
and it also works from in an android app.

??? are you downloading it via Http2Utills server?

sorex · Sep 3, 2015

yes, but I updated it so it might go over OKhttp

ilan · Sep 3, 2015

sorex said:
yes, but I updated it so it might go over OKhttp

i dont understand, can you post your code please

sorex · Sep 3, 2015

B4X:

dl.Initialize("kkk",Me)
dl.Download("http://www.sagital.net/lists/0504844663.txt")

I use the httputils2 (version 2.10) library, not that class file

The one that was modded for use with/via that new Okhttp lib

ilan · Sep 3, 2015

Thank you, i am using the class file.
I will check that lib, can you please tell me where i can download it?

(Btw do you have any experience with creating your own ftp server? I had enough from those companies, i would like to use my mac mini and turn it to an ftp server where i can store my files and download them..)

sorex · Sep 3, 2015

well, you have an ftp service in windows that you can use or use something like serv-u / filezilla

sorex · Sep 3, 2015

the files you need to install

https://www.b4x.com/android/forum/threads/okhttp-replaces-the-http-library.54723/#content

ilan · Sep 3, 2015

Thanx sorex, i will check it out

sorex · Sep 3, 2015

you can also search for 3CDeamon, it's a free (t)ftp server program from 3Com which is used a lot to upgrade firewalls, switches, voip phones etc

I don't know if any of these exist for mac tho but you could setup a virtual machine on your mac with windows and install it there.

sorex · Sep 3, 2015

FileZilla has an OSX port

https://filezilla-project.org/download.php?show_all=1

ilan · Sep 3, 2015

There is an app called Os X Server created by apple it cost about 15$ and it support lot of great stuff including file sharing...

I will maybe try it out...

Thanx anyway sorex

sorex · Sep 3, 2015

FZ is free you know

ilan · Sep 3, 2015

thank you so much sorex, updating to okHttp has solved the problem!!

i think @Erel should add a feature to b4a/b4i/b4j that if there is a new lib version available i will see a notification in my library tab (only for libs that i am using) like if i use http v1.0 and there is a new version v1.2 then i should see a notification near to that lib... that would be really great and save lot of frustration

Android Question mod security error 403??

Expert

Well-Known Member

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Expert

Similar Threads