adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-11-03 07:22:22 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

permission to access /identification.php + 403 Forbidden in ErrorDocument #849

New Issue
Open
opened 2026-10-05 00:20:47 +02:00 by adam · 3 comments
adam commented 2026-10-05 00:20:47 +02:00
Owner
Copy link
Copy source

I am getting the following errors on a brand new installation of 2.9.4:

=========================
Forbidden
You don't have permission to access /identification.php on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

This happens in 2 scenarios:

  1. Clicking the Login link (sends me to identification.php) and then entering details in the main content are in the middle of the screen.
  2. Trying to login from a mobile device (iPhone SE, iOS 12.1.2, Safari) by clicking: 'dialpad' icon in upper right >> +Identification >> Login

It DOES NOT happen when:

  1. Logging in from the Identification block in the bottom left part of the sidebar on a PC;
  2. Switching to Desktop view on a mobile device and then doing 1. above.

I setup a test site at an old domain I don't use forex-autopilot.com. You can try logging in with name:cheap. I can also provide admin pass or the DB or any other installation details upon request. This domain will expire in a few weeks, so if anybody could take a look at this befre this happens it would be great!

The installation was done via a Softaculos script provided by my host (namecheap).

PHP details are as follows:

Current PHP version: 5.6
allow_url_fopen | On
display_errors | Off
error_reporting | E_ALL
file_uploads | On
include_path | .:/opt/alt/php56/usr/share/pear:/opt/alt/php56/usr/share/php
log_errors | On
mail.force_extra_parameters | no value
max_execution_time | 300
max_input_time | -1
memory_limit | 512M
open_basedir | no value
post_max_size | 128M
session.save_path | /tmp
short_open_tag | On
upload_max_filesize | 512M

I am getting the following errors on a brand new installation of 2.9.4: ========================= Forbidden You don't have permission to access /identification.php on this server. Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request. ========================= This happens in 2 scenarios: 1. Clicking the Login link (sends me to identification.php) and then entering details in the main content are in the middle of the screen. 2. Trying to login from a mobile device (iPhone SE, iOS 12.1.2, Safari) by clicking: 'dialpad' icon in upper right >> +Identification >> Login It DOES NOT happen when: 1. Logging in from the Identification block in the bottom left part of the sidebar on a PC; 2. Switching to Desktop view on a mobile device and then doing 1. above. I setup a test site at an old domain I don't use forex-autopilot.com. You can try logging in with name:cheap. I can also provide admin pass or the DB or any other installation details upon request. This domain will expire in a few weeks, so if anybody could take a look at this befre this happens it would be great! The installation was done via a Softaculos script provided by my host (namecheap). PHP details are as follows: - - - - - Current PHP version: 5.6 allow_url_fopen | On display_errors | Off error_reporting | E_ALL file_uploads | On include_path | .:/opt/alt/php56/usr/share/pear:/opt/alt/php56/usr/share/php log_errors | On mail.force_extra_parameters | no value max_execution_time | 300 max_input_time | -1 memory_limit | 512M open_basedir | no value post_max_size | 128M session.save_path | /tmp short_open_tag | On upload_max_filesize | 512M <!-- github-sync-id:400636342 -->
adam commented 2026-10-05 00:20:48 +02:00
Author
Owner
Copy link
Copy source

My host support said that the issue is caused by mod_security and "resolved" it by disabling mod_security. They could not provide an answer to my question whether the problem is with mod_security (false positive) or with piwigo (incorrect piwigo behaviour detected by mod_security).

Please comment on the above so I can close this issue if it is the former.

My host support said that the issue is caused by mod_security and "resolved" it by disabling mod_security. They could not provide an answer to my question whether the problem is with mod_security (false positive) or with piwigo (incorrect piwigo behaviour detected by mod_security). Please comment on the above so I can close this issue if it is the former. <!-- github-comment-id:457130103 -->
adam commented 2026-10-05 00:20:49 +02:00
Author
Owner
Copy link
Copy source

Sorry to raise an old issue, but this is still an issue with cPanel and ModSecurity enabled. When logging in using identification.php

Forbidden
You don't have permission to access this resource.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

If you log in using the box that appears when Login is hovered it works well, and is currently the only way I can login.

Disabling ModSecurity fixes it for some reason, but WebHosts really really don't like doing this.

Sorry to raise an old issue, but this is still an issue with cPanel and ModSecurity enabled. When logging in using identification.php ``` Forbidden You don't have permission to access this resource. Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request. ``` If you log in using the box that appears when Login is hovered it works well, and is currently the only way I can login. Disabling ModSecurity fixes it for some reason, but WebHosts really really don't like doing this. <!-- github-comment-id:745168878 -->
adam commented 2026-10-05 00:20:50 +02:00
Author
Owner
Copy link
Copy source

I'm having the same problem. I don't even know what ModSecurity is but it doesn't sound like something I want to disable. I'm using cPanel as well. Hovering over login doesn't bring up a box so I have absolutely no way to log in without getting the 403 error. I just get a broken site after install.

I'm having the same problem. I don't even know what ModSecurity is but it doesn't sound like something I want to disable. I'm using cPanel as well. Hovering over login doesn't bring up a box so I have absolutely no way to log in without getting the 403 error. I just get a broken site after install. <!-- github-comment-id:913754425 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#849