QLWiki updated to latest version

QL Wiki discussion for anything Wiki related
User avatar
bwinkel67
Super Gold Card
Posts: 567
Joined: Thu Oct 03, 2019 2:09 am

Re: QLWiki updated to latest version

Postby bwinkel67 » Tue Oct 20, 2020 5:06 pm

NormanDunbar wrote:Hi Rob, just noticed this post on the forum. Bwinkle is having the same 403 error inserting code into a post on the forum. viewtopic.php?f=3&t=3193&p=36792#p36792 -- might be related?

P.S. qlforum wouldn't let me insert the code this time so I had to use pictures...kept giving me this page:

403.png


It's a weird error as some code will post but others won't. I tried a 5 line snippet of C code in a forum Code block and it gave me that 403 page. When I took the 'i' in 'if' out it posted (or the 'f' in 'if') but not otherwise. However, it wasn't the 'if' that caused it since elsewhere I could get an 'if' to work, just one of many examples. So I reverted to screen images instead. Never had issues with a Code block before (C or BASIC).


User avatar
NormanDunbar
Forum Moderator
Posts: 1233
Joined: Tue Dec 14, 2010 9:04 am
Location: Leeds, West Yorkshire, UK
Contact:

Re: QLWiki updated to latest version

Postby NormanDunbar » Tue Oct 20, 2020 5:20 pm

Hi bwinkle67,

There are currently similar 403 errors on the QL Wiki, which is currently being investigated. The fact that you see them on the Forum too was what I was bringing to Rob's attention. Rob has guru level skills and access, which I don't have. (And don't need!).

Cheers,
Norm.


Why do they put lightning conductors on churches?
Author of Arduino Software Internals - https://www.amazon.co.uk/Arduino-Softwa ... 1484257898, https://www.apress.com/gb/book/9781484257890
User avatar
bwinkel67
Super Gold Card
Posts: 567
Joined: Thu Oct 03, 2019 2:09 am

Re: QLWiki updated to latest version

Postby bwinkel67 » Sat Oct 24, 2020 10:48 pm

robheaton wrote:I'm going to take a copy of the QLWiki and load it on a local server and see if i can work out what is going on.

In the logs I have access to on the live system, there are no errors shown in the logs, so we don't have a lot to go on.
Work is pretty hectic at the moment, but I'm hoping to do this over the next few days, just hope it leads us somewhere!


Hi Rob,

I thought this may be helpful information to you in debugging the 403 error on code inclusion in qlforum: it kooks like it crashes (i.e. goes to the 403 page) when an "if" is used in the code listing (C source code for me...haven't tried it with BASIC). I substituted the character "i" with the ASCII character code 141 (which sort of looks like an "i") where I had and "if" and that seemed to have worked.


User avatar
Chr$
Super Gold Card
Posts: 626
Joined: Mon May 27, 2019 10:03 am
Location: Sachsen, Germany

Re: QLWiki updated to latest version

Postby Chr$ » Mon Nov 09, 2020 10:05 am

This looks like it is likely to be the cause to the qlwiki issues (and the same for the less severe issue in the forum within the same web space):

https://www.dokuwiki.org/faq:mod_security

Apache sensitivity to certain words and code.


Collector of QL related computers, accessories and software even though I don't understand how any of them work.
Original QL's: many (plus quite a bit of other old stuff and 100+ original software titles)
Custom AT cased QL system with Gold Card, Qimi mouse, Hermes and MFM HDD
PC with QXLII card installed
Q68 also present

Ask me about near NOS re-felted good quality Microdrive Carts - many available.
User avatar
NormanDunbar
Forum Moderator
Posts: 1233
Joined: Tue Dec 14, 2010 9:04 am
Location: Leeds, West Yorkshire, UK
Contact:

Re: QLWiki updated to latest version

Postby NormanDunbar » Mon Nov 09, 2020 10:57 am

I think you might be on to something there chr$. I just ran a test with a code block containing the text "if x = 1 then" and it previewed quite happily. I changed that to "if ?x = 1? then" and it gave me a huge 403 Forbidden page. Adding spaces before and/or after the opening bracket made no difference.

Even in the plain text part it barfs with parenthesis, I had to change the opening and closing brackets in the example to question marks to be able to post this reply!!!!

Thanks for finding that one, it looks like it's an old old "bug" though, some of the responses are dated 2009!

I'll make sure the admins know -- but I suspect they already have read your post.


Cheers,
Norm.


Why do they put lightning conductors on churches?
Author of Arduino Software Internals - https://www.amazon.co.uk/Arduino-Softwa ... 1484257898, https://www.apress.com/gb/book/9781484257890
User avatar
robheaton
Site Admin
Posts: 345
Joined: Fri Nov 19, 2010 5:50 pm
Location: Ormskirk, UK

Re: QLWiki updated to latest version

Postby robheaton » Wed Nov 11, 2020 8:46 pm

I had a look through that post and I tried the insecure fix as a quick test.
This broke the hosting for both the forum and wiki, just resulting in server errors.

I’ve undone this and the forum and wiki are working again, I’ll raise a support ticket with the web host, as there are no options in the control panel for mod_security.


Certainly worth exploring, thanks for the link Chr$


Current Retro Hardware :-
ZX80 Clone, ZX81 + Chroma + ZXPand + Zeddynet, Just Speccy 128, Speccy 48K x2, Spectrum 128 +2, BB Sinclair QL + Trump Card Clone, Aurora + Super GC + QubIDE.
BBC Model B 32k + Datacenter + Z80 Tube, BBC B+64K, BBC Master 512, BBC Master 128k + Datacenter & 6502 Tube, Risc PC x2.
Amiga 600, Amiga 1200, Commodore 64 x3, Commodore 128, Commodore 128DCR, C64 Ultimate, VIC 20, Sega Megadrive, Mega CD + 32X, Sega Megadrive II + Mega CD II, Sega Saturn.
User avatar
Chr$
Super Gold Card
Posts: 626
Joined: Mon May 27, 2019 10:03 am
Location: Sachsen, Germany

Re: QLWiki updated to latest version

Postby Chr$ » Wed Nov 11, 2020 9:19 pm

robheaton wrote:I had a look through that post and I tried the insecure fix as a quick test.
This broke the hosting for both the forum and wiki, just resulting in server errors.

I’ve undone this and the forum and wiki are working again, I’ll raise a support ticket with the web host, as there are no options in the control panel for mod_security.


Certainly worth exploring, thanks for the link Chr$

Thanks Rob and Norm.


Collector of QL related computers, accessories and software even though I don't understand how any of them work.
Original QL's: many (plus quite a bit of other old stuff and 100+ original software titles)
Custom AT cased QL system with Gold Card, Qimi mouse, Hermes and MFM HDD
PC with QXLII card installed
Q68 also present

Ask me about near NOS re-felted good quality Microdrive Carts - many available.
User avatar
robheaton
Site Admin
Posts: 345
Joined: Fri Nov 19, 2010 5:50 pm
Location: Ormskirk, UK

Re: QLWiki updated to latest version

Postby robheaton » Wed Nov 25, 2020 12:53 pm

Just a quick update confirming this has been fixed!

It was an issue with mod_security as Chr$ suggested! :D


Current Retro Hardware :-
ZX80 Clone, ZX81 + Chroma + ZXPand + Zeddynet, Just Speccy 128, Speccy 48K x2, Spectrum 128 +2, BB Sinclair QL + Trump Card Clone, Aurora + Super GC + QubIDE.
BBC Model B 32k + Datacenter + Z80 Tube, BBC B+64K, BBC Master 512, BBC Master 128k + Datacenter & 6502 Tube, Risc PC x2.
Amiga 600, Amiga 1200, Commodore 64 x3, Commodore 128, Commodore 128DCR, C64 Ultimate, VIC 20, Sega Megadrive, Mega CD + 32X, Sega Megadrive II + Mega CD II, Sega Saturn.
User avatar
Chr$
Super Gold Card
Posts: 626
Joined: Mon May 27, 2019 10:03 am
Location: Sachsen, Germany

Re: QLWiki updated to latest version

Postby Chr$ » Wed Nov 25, 2020 4:34 pm

robheaton wrote:Just a quick update confirming this has been fixed!

It was an issue with mod_security as Chr$ suggested! :D


It still doesn't seem to work for me. I refreshed the page, logged out and in again and still get the 403. Should I try something else, like delete related cookies or something?


Collector of QL related computers, accessories and software even though I don't understand how any of them work.
Original QL's: many (plus quite a bit of other old stuff and 100+ original software titles)
Custom AT cased QL system with Gold Card, Qimi mouse, Hermes and MFM HDD
PC with QXLII card installed
Q68 also present

Ask me about near NOS re-felted good quality Microdrive Carts - many available.
User avatar
NormanDunbar
Forum Moderator
Posts: 1233
Joined: Tue Dec 14, 2010 9:04 am
Location: Leeds, West Yorkshire, UK
Contact:

Re: QLWiki updated to latest version

Postby NormanDunbar » Wed Nov 25, 2020 4:41 pm

I've tried it and it is working for me on my tablet.

This code should work too:

Code: Select all

if (c) then exit;
 


The brackets used to cause 403s as well.

I'm not sure but clearing tha cache and/or cookies should sort you out -- but webby things are a right PITA at times.


Cheers,
Norm.


Why do they put lightning conductors on churches?
Author of Arduino Software Internals - https://www.amazon.co.uk/Arduino-Softwa ... 1484257898, https://www.apress.com/gb/book/9781484257890

Who is online

Users browsing this forum: No registered users and 1 guest