Author Topic: Forbidden access to the email confirmation link  (Read 224 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Forbidden access to the email confirmation link
« on: August 25, 2024, 08:06:35 PM »
Hi guys,

I have a problem, when I enable the mod_security module, when new username register on my website and they get email with link confirmation like this one:
https://ibb.co/kgNSWL8
If they access the link confirmation (when mod security is enabled with those options: https://ibb.co/r5YRPs0) they get forbidden access like this: https://ibb.co/85VtTG4 and the account is not activated.
If I disable mod_security the link working with no problem.

Can someone help me with this problem please?

Offline
*
Re: Forbidden access to the email confirmation link
« Reply #1 on: August 26, 2024, 03:25:21 AM »
In the image https://ibb.co/r5YRPs0 if you click on Logs. You should be able to see what ID caused the issue. Look for something like
Quote
id "210350"
.
Click on Disabled Rules add
Quote
SecRuleRemoveById 210350
then restart Apache.

That will whitelist the rule on all domains. You are best working out the actual cause and fixing it so email link doesnt cause issues (if you have access to that)
« Last Edit: August 26, 2024, 03:27:14 AM by BeZazz »

Offline
*
Re: Forbidden access to the email confirmation link
« Reply #2 on: August 26, 2024, 05:03:53 AM »
Was id 210730 :)
You are the best, now is working.

Thank you for the support!

Offline
*
Re: Forbidden access to the email confirmation link
« Reply #3 on: August 26, 2024, 05:18:53 AM »
Good to hear.

You're welcome. :)