error 403 in confirmation link

Viewing 6 replies - 1 through 6 (of 6 total)
  • iThemes Support

    (@ithemes-support)

    11 years, 5 months ago

    Hi,

    Could you try disabling the Long URLs and Suspicious Query Strings features and see if that helps?

    Thanks,

    Gerroald

    Thread Starter MirellaM

    (@mirellam)

    11 years, 5 months ago

    Perfect Thankssss!!!!

    DasSkar

    (@dasskar)

    11 years, 4 months ago

    Hi iThemes Support,

    i experienced the very same problem.
    Turned out it’s from your
    RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|ê|"|;|\?|\*|=$).* [NC,OR]

    Link is like
    /?wysija-page=1&controller=confirm&wysija-key=ff1111f11ff1111ff1f111f11f111fff&action=subscribe&wysijap=subscriptions&wysiconf=WyAaAl0=

    Your regex catches the very last =

    iThemes Support

    (@ithemes-support)

    11 years, 4 months ago

    Hey DasSkar,

    Thanks for the information!

    Thanks,

    Gerroald

    SingDancePlayLearn

    (@singdanceplaylearn)

    11 years, 1 month ago

    I commented out this line, and indeed it resolve this exact issue that I was also experiencing.

    However, have I somehow made the site more insecure by commenting out this line? Is there a fix or better regex to replace it, so that it doesn’t return a 403 when mobile users try to confirm their subscription?

    Thanks!

    Tarmo Toikkanen

    (@tatti)

    10 years, 9 months ago

    Commenting out that line helped me as well. It’s not just mobile users, but all confirmation links. The problem is that for logged-in users confirmation links work fine, so most admins when testing that everything works will not spot this problem early enough.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘error 403 in confirmation link’ is closed to new replies.

Tags