MyBB Community Forums

Good Morning, All..

I am using 1.6.2
When i am trying to edit the code in the template, i got error of:

Quote:Forbidden

You don't have permission to access /admin/index.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

After I searched, it said that it could be the plugin I installed.

My first question, is there shortcut way to know which plugin caused this? since I installed all my plugin on lump-sum (all together at once) and I tried to avoid disable all and then enable it one by one and test it, which will consumed me a lot of time..

Next, could it because of the themes I used? Since this error happened when I try to change / edit some code (from http://community.mybb.com/thread-79700.html) in the template.
I am using Blue Warez from http://mods.mybb.com/view/blue-warez-3-0

Last, as suggested in http://wiki.mybb.com/index.php/Help:Mod_security, I have contacted my webhost to disabled it on my account. Question, is this mod_security is important in Apache server? What is the implication if we disabled it?


Thank you very much for the answer


Szeto

Could you try find the log? Usally it should leave an error.log or similar in either root or in /admin/ folder of your forum.

If you got CPanel you can also go to "Error Logs" under "logs" when you go to cpanel on your server.

If your using 1.6, the mod_security issue was solved. Are you using any 1.4 plugins that used the 1.4 style of ACP links??

What's the URL you're on when you see the error??

The link is

http://MyDomain.com/MyAdminDir/index.php?module=style-templates&action=edit_template&title=forumdisplay_thread&sid=3&expand=5

There's no reason mod_security should be complaining about that at all, that's the new style URL; as explained above, check your server error logs to see if it says what is actually causing it.

But Matt, now it is OK..
I mean, after my webhosting disable the mod_rewrite, I can save the template editing now..

Strange?

Anyway, is the mod_security is necessary?
What is the impact if we disable it?

Well it increases security, but it must be configured incorrectly if it was throwing an error on that page specifically, there's really no reason for it to give an error based on the URL.