J Juzer Hussain Active Member Licensed User Longtime User Sep 7, 2015 #1 Hi, My app was connecting fine suddenly i started getting msg "HTTP Error 403.0 - ModSecurity Action You do not have permission to access this file or folder" as such i replaced HTTP with okHTTP. But app is still not connecting.Pls help. Juzer
Hi, My app was connecting fine suddenly i started getting msg "HTTP Error 403.0 - ModSecurity Action You do not have permission to access this file or folder" as such i replaced HTTP with okHTTP. But app is still not connecting.Pls help. Juzer
Erel B4X founder Staff member Licensed User Longtime User Sep 9, 2015 #21 Note that you should use File - Export as zip when uploading files to the forum. ModSecurity protects from SQL injections. Your query triggers one of its rules so it blocks it. You should disable the problematic rule (you can see the rule number in the server logs). Upvote 0
Note that you should use File - Export as zip when uploading files to the forum. ModSecurity protects from SQL injections. Your query triggers one of its rules so it blocks it. You should disable the problematic rule (you can see the rule number in the server logs).
J Juzer Hussain Active Member Licensed User Longtime User Sep 10, 2015 #22 I am talking to ISP, btw Its a select statement as you saw if it is breaking the rule then i guess it will stuck at every step. Upvote 0
I am talking to ISP, btw Its a select statement as you saw if it is breaking the rule then i guess it will stuck at every step.
J Juzer Hussain Active Member Licensed User Longtime User Sep 10, 2015 #23 I tried to zip it gave some error ("object not set..") and there is limit of 512 therefor i managed somehow any ways i hope i will get some workaround Erel Upvote 0
I tried to zip it gave some error ("object not set..") and there is limit of 512 therefor i managed somehow any ways i hope i will get some workaround Erel
S sorex Expert Licensed User Longtime User Sep 10, 2015 #24 Juzer Hussain said: I am talking to ISP, btw Its a select statement as you saw if it is breaking the rule then i guess it will stuck at every step. Click to expand... not really, the way you do it is wrong. you should only send commands with optional parameters like an id or search parameter. if you send over full queries it will be easy to read out all your data or inject code to trash data. so in your case it could be url/getdata.aspx?op=get1master . the aspx will know what query it needs to run. (Select top 1 * from companymaster) Upvote 0
Juzer Hussain said: I am talking to ISP, btw Its a select statement as you saw if it is breaking the rule then i guess it will stuck at every step. Click to expand... not really, the way you do it is wrong. you should only send commands with optional parameters like an id or search parameter. if you send over full queries it will be easy to read out all your data or inject code to trash data. so in your case it could be url/getdata.aspx?op=get1master . the aspx will know what query it needs to run. (Select top 1 * from companymaster)
J Juzer Hussain Active Member Licensed User Longtime User Sep 10, 2015 #25 I was talking to the ISP they said "Cannot break rule no - 13....." I changed it to just pass a variable value and now its working. Thank You Very Much SOREX Upvote 0
I was talking to the ISP they said "Cannot break rule no - 13....." I changed it to just pass a variable value and now its working. Thank You Very Much SOREX
S sorex Expert Licensed User Longtime User Sep 10, 2015 #26 no problem, Juzer. if you have more questions you know where to find us Upvote 0
