Mobile app version of vmapp.org
Login or Join
Dunderdale272

: 403 when query string parameter contains an encoded URL I'm using shared hosting with minimal access to any configuration settings. I've created a more or less empty HTML file, emptypage.html,

@Dunderdale272

Posted in: #403Forbidden #Apache #Htaccess

I'm using shared hosting with minimal access to any configuration settings.

I've created a more or less empty HTML file, emptypage.html, with the following contents:

<!DOCTYPE html>
<html>
<body>

</body>
</html>


When I pass an encoded URL as a query string parameter, I get a 403 error from the server.

Example URL:
example.com/emptypage.html?u=http%3A%2F%2Fexample%2Eorg

However, if the encoded URL is for the same domain, the page displays normally.

Example URL:
example.com/emptypage.html?u=http%3A%2F%2Fexample%2Ecom

Similarly, if the 'h' from the beginning of the URL is removed, the page displays normally.

Example URL:
example.com/emptypage.html?u=ttp%3A%2F%2Fexample%2Eorg

Could this be the result of some web server setting that I may be able to override in my local .htaccess file? My web host uses Apache (not sure which version).

NOTE: I asked a similar question earlier but it was not well understood and was put on hold. I've since done more research to figure out what exact conditions are yielding this issue.

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Dunderdale272

1 Comments

Sorted by latest first Latest Oldest Best

 

@Harper822

Check .htaccess files to see if theres anything in it causing a 403.

Also ask the server admin to check httpd.conf (apache's configuration file) to see if that has anything referencing error 403.

And finally, a special module might be installed that blocks out certain URLs.

And the file extension should be anything but .html if you're adding on query strings because html pages are static pages. (pages that don't change based on parameters).

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme