MyBB Community Forums

Hello.

I upgraded yesterday from 1.2.14 to 1.4.3. First, closed forum with setting in Admin CP. Secondly I deleted old files and uploaded new ones. I had some plugins active, but I hadn't the files in server (I deleted them many monthts ago), but I don't think that's the problem.

Ok, I run upgrade script and everything goes fine. Forum 100% accesible, and same for Admin CP. But when I try to go to deep menus in ACP, It returns 403 error.

I mean, I can enter /index.php?module=config, but not /index.php?module=config/settings, so I think the problem is URLs with dash.

I tried the following:

1º CHMOD public_html, www, admin directory and index.php in admin directory to 755, nothing happened.
2º .htaccess to RewriteBase /, deleted +FolowSymLinks and -Indexes, nothing happened.
3º Deactivate mod_security, but it's not because of that.

So, I guess I must put my .htaccess and my error log for that 403. I deleted error_log yesterday, but yesterday I didn't find anything for this error. And today there is no error_log, even accesing the pages which return 403 error. So, this is my .htaccess:

Options -MultiViews +FollowSymLinks -Indexes

RewriteEngine On

# Remove www from URL
RewriteCond %{HTTP_HOST} ^www.limitrek.com [NC]
RewriteRule ^(.*)$ http://limitrek.com/$1 [R=301]

# Subdomain redirects
RedirectMatch 301 ^/i/(.*)$ http://i.limitrek.com/$1
RedirectMatch 301 ^/blog/(.*)$ http://blog.limitrek.com/$1

# Rewrited URLs
RewriteRule ^wallpapers/$ wallpapers.php

# Rewrited MyBB URLs
RewriteRule ^forum-([0-9]+).html forumdisplay.php?fid=$1 [L,QSA]
RewriteRule ^forum-([0-9]+)-page-([0-9]+).html forumdisplay.php?fid=$1&page=$2 [L,QSA]
RewriteRule ^thread-([0-9]+).html showthread.php?tid=$1 [L,QSA]
RewriteRule ^thread-([0-9]+)-page-([0-9]+).html showthread.php?tid=$1&page=$2 [L,QSA]
RewriteRule ^thread-([0-9]+)-lastpost.html showthread.php?tid=$1&action=lastpost [L,QSA]
RewriteRule ^thread-([0-9]+)-nextnewest.html showthread.php?tid=$1&action=nextnewest [L,QSA]
RewriteRule ^thread-([0-9]+)-nextoldest.html showthread.php?tid=$1&action=nextoldest [L,QSA]
RewriteRule ^thread-([0-9]+)-newpost.html showthread.php?tid=$1&action=newpost [L,QSA]
RewriteRule ^thread-([0-9]+)-post-([0-9]+).html showthread.php?tid=$1&pid=$2 [L,QSA]
RewriteRule ^post-([0-9]+).html showthread.php?pid=$1 [L,QSA]
RewriteRule ^announcement-([0-9]+).html announcements.php?aid=$1 [L,QSA]
RewriteRule ^user-([0-9]+).html member.php?action=profile&uid=$1 [L,QSA]
RewriteRule ^calendar-([0-9]+).html calendar.php?calendar=$1 [L,QSA]
RewriteRule ^calendar-([0-9]+)-year-([0-9]+).html calendar.php?action=yearview&calendar=$1&year=$2 [L,QSA]
RewriteRule ^calendar-([0-9]+)-year-([0-9]+)-month-([0-9]+).html calendar.php?calendar=$1&year=$2&month=$3 [L,QSA]
RewriteRule ^calendar-([0-9]+)-year-([0-9]+)-month-([0-9]+)-day-([0-9]+).html calendar.php?action=dayview&calendar=$1&year=$2&month=$3&day=$4 [L,QSA]
RewriteRule ^calendar-([0-9]+)-week-([0-9]+).html calendar.php?action=weekview&calendar=$1&week=$2 [L,QSA]
RewriteRule ^event-([0-9]+).html calendar.php?action=event&eid=$1 [L,QSA]

# 301 for Rewrited URLs
Redirect 301 /wallpapers.html http://limitrek.com/wallpapers/
Redirect permanent /wallpapers.html http://limitrek.com/wallpapers/

# Change 404 Error page
ErrorDocument 404 /404.php

# Set index
DirectoryIndex portal.php index.php index.html index.htm

# Use PHP5 as default
AddHandler application/x-httpd-php5 .php

# Deactivate mod_security
<IfModule mod_security.c>
	SecFilterEngine Off
	SecFilterScanPOST Off
</IfModule>

# More modules
<IfModule mod_env.c>
	SetEnv SEO_SUPPORT 1
</IfModule>

<IfModule mod_deflate.c>
	AddOutputFilterByType DEFLATE application/x-javascript text/css text/html text/xml
</IfModule>

And this is the page I get when trying to enter (click for bigger):



Thanks for the help; see you.

You need to contact your host to accept your domain onto the mod_security whitelist for this to work.

Unfortunately your host has extra rules active, so the MyBB htaccess file doesn't disable mod_security directly...

Ok, thanks, I'll contact them.

But, only in case... What if they don't accept?

Well then they're crappy hosts and you should change. You'd probably have to anyway if they don't disable it as you'd still have the problems.

Done, now it works fine.

Thanks a lot.