Problem saving settings on the server

[tecnomaster]

Hello,

I have a problem when I upload my files from a local installation to live server.

Everything works perfect but when I try to change the configuration of Contao generates the following error:
___________________
Forbidden

You don't have permission to access /contao/main.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.30 Server at domain.com Port 80
___________________

I tried everything but I can not fix the problem.

I note that my local installation everything works perfect and I can save settings for Contao perfectly.

Any suggestions?

thanks

[Ruud]

I encountered the exact same problem. I tried to set php to run as fastCGI, but I am waiting for that to happen to see if that makes a difference...

[taca]

Hi,

Have you tried to test with Contao Check?

Best regards.

[tecnomaster]

Hi,

Check Contao says that everything is correct on the server.

I can not fix the problem. I changed the file permissions to 777 and does not work.

I hope your help,

thank you very much

[Ruud]

ps, same for me. I tried contao-check, all good. Still, I suspect the server is misconfigured in some way....

[tecnomaster]

I tested with two different servers and the problem is the same.

Is this a bug Contao 2.11?

[ramjet]

Could it be to do with the .htaccess file (that is, are you using the 2.11 one, and have you configured it for your server)?

[tecnomaster]

I renamed the file .htaccess.default that comes by default with Contao 2.11 and the problem persists.

I can not find the solution to the problem.

Thanks

[Ruud]

I got this from the server logs. Does that mean anything to anyone?

[Wed Mar 14 10:24:07 2012] [error] [client 99.99.199.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(< ?(?:script|about|applet|activex|chrome).(?:script| about|applet|activex|chrome) ?>|> ?< ?(img ?src|a ?href) ?= ?(ht|f)tps?:/|" ?> ?<|" ?[a-z]+ ?<.>|> ?"? ?(>|<)|< ?/?i?frame|\%env)" at ARGS:allowedTags. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "690"] [id "340147"] [rev "56"] [msg "Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Generic XSS filter"] [data ".php?"] [severity "CRITICAL"] [hostname "domain.com"] [uri "/contao/main.php"] [unique_id "T2Bjt1UR1YIAABPgbc4AAAAP"]

I submitted this as a bug after seeing the problem did not exist before

[tecnomaster]

I think it's a bug.

Unfortunately the forum in English does not have as much movement as in German.

This is the great disadvantage of Contao CMS

:-(

[xchs]

It's not a bug, one of the web server firewall rules is matching a predefined pattern. Therefore, the server denied the access.

[tecnomaster]

Hi xchs,

You are right, not a Bug.

I changed my hosting provider and everything works perfectly.

Something was wrong with my previous server.

[Ruud]

It is not to say something was wrong with your server. It could have been mod_security blocking certain words like "script". Might be something the host could change for you.