Plugin Author
AITpro
(@aitpro)
Post the error relating to this issue/problem from your BPS Security Log.
Thanks for responding. I already looked at that, and it doesn’t log it. Error Logging is turned on, but it doesn’t see the request I quess. I can try again and see if it will log the error.
Plugin Author
AITpro
(@aitpro)
If it is an internal javascript call where a javascript pop-up box is in play then the error will not be logged.
Plugin Author
AITpro
(@aitpro)
Also post the URL that is generating the 403 error. You can of course change your domain name to example.com.
It is very odd, I can open the URL in my browser, and play the file in my browser. However, the PowerPress plugin, and my podcasting app gives me a 403 error.
Plugin Author
AITpro
(@aitpro)
Yep, it is not the URL itself then. I can view your Feed and the podcasts launch fine so the issue is that however AntennaPod is doing whatever it is doing is triggering a security filter to block whatever it is doing. I am looking at the version in github to look for clues. Most likely it is going to be something simple like this app makes a HEAD Request that is being blocked or something similar to that.
Plugin Author
AITpro
(@aitpro)
You should see errors in your Security log for the PowerPress and podcasting things.
Plugin Author
AITpro
(@aitpro)
I could be wrong, but try something very simple.
Comment out these 2 User Agent filters by adding a pound sign in front of them.
#RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
#RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
Plugin Author
AITpro
(@aitpro)
I don’t see anything unusual in the AntennaPod app code. It is a standard Android app and using standard connectivity code with nothing out of the ordinary going on: JSON, java, xml, etc.
Plugin Author
AITpro
(@aitpro)
You can also try adding a general skip/bypass rule for the powerpress plugin folder.
Example:
# Adminer MySQL management tool data populate
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/add-the-powerpress-folder-name here/ [NC]
RewriteRule . - [S=13]
Thanks! I will try that stuff out. In the mean time, here is the security log.
>>>>>>>>>>> 403 GET or Other Request Error Logged – August 19, 2013 – 4:17 pm <<<<<<<<<<<
REMOTE_ADDR: 173.254.28.43
Host Name: just43.justhost.com
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER:
REQUEST_URI: /archives/thewordtoliveby/2013/the_word_to_live_by_08-17-13.mp3.mp3
QUERY_STRING:
HTTP_USER_AGENT: WordPress/3.6; http://lwhf.com
Unfortunately, none of that works. 🙁 I went ahead and deleted the .htacces file, and it does work after I delete it, so it is something that is in my .htaccess file. Thanks for helping me out, I really apreciate it. I didn’t expect you to download the app, 🙂
Hm, very odd. I am not an expert by any means when it comes to the .htaccess file, however I am pretty good at editing, and finding problems. I am not 100% sure how the .htacces works, but since there are about 239 lines, I went ahead an deleted 50 lines at a time, trying to narrow down the problem area, and I couldn’t do it. If I delete the entire .htaccess file, AntennaPod works, but just deleteing 50 lines at a time, doesn’t seem to work.
What I would do, it delete lines 1-50, try it. Doesn’t work.
Restore lines 1-50, delete lines 51-100, try it. Doesn’t work.
Restore lines 51-100, delete lines 101-150, try it. Doesn’t work…etc all the way through 239.
The code must work together somehow. If I delete the first 183 lines of code, it works. If I delete the first 126 lines of code, it doesn’t work. So, naturally, the problem is in the code in the middle. Well, I deleted the code in the middle, and now I get a different error! When I do that, I am not getting a 404 error.
