Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Is anyone else getting this message?

Infiniview Merit
The 100 Trillionth Cell
Join date: 27 Apr 2006
Posts: 845
01-28-2009 15:58
"Forbidden
You don't have permission to access /newreply.php on this server."

When you try to reply to a thread?
Amaranthim Talon
Voyager, Seeker, Curious
Join date: 14 Nov 2006
Posts: 12,032
01-28-2009 16:05
Happened over and over when replying to the Two weeks thread- i determined was due to some bit of hidden code i was quoting? Just deleted stuff til it let me post-but there is a JIRA i think about a series of words appearing together that seem to bring it on...
_____________________
"Yield to temptation. It may not pass your way again. "
Robert A. Heinlein




http://talonfaire.blogspot.com/

Visit Talon Faire Main:
http://slurl.com/secondlife/Misto%20Presto/216/21/155- Main Store

XStreets: http://tinyurl.com/6r7ayn
Infiniview Merit
The 100 Trillionth Cell
Join date: 27 Apr 2006
Posts: 845
01-28-2009 16:21
Ah,

Thank you Amaranthim, this was bugging me. I'll rewrite my response.
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
01-28-2009 16:46
I think it has to do with this

https://jira.secondlife.com/browse/WEB-917

The following SQL combinations will cause a FORBIDDEN response.

"from" following "select" or "delete"

"set" following "update"

It does not matter how far apart the words are.
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
RobbyRacoon Olmstead
Red warrior is hungry!
Join date: 20 Sep 2006
Posts: 1,821
01-28-2009 17:47
From: SuezanneC Baskerville
It does not matter how far apart the words are.


Because the LL web devs are too lazy to invest any time whatsoever on making the forums work correctly. I understand that it's insanely difficult to prevent all forms of sql injection, but LL have really taken the lazy way out : Lazy coding combined with "remove features until it's marginally safer"
_____________________
Puppet Shepherd
New Year, New Tricks
Join date: 14 Feb 2007
Posts: 725
01-28-2009 20:36
That's absolutely right, Suezanne! I tried to reply to one thread and got that message repeatedly. Turns out I had a "from" a couple lines down from a "select". One I got rid of "select", my reply posted just fine.
_____________________
Come see my new 1-prim flowers, only $10 each! Lots of other neat stuff to find @ Puppet Art,
http://slurl.com/secondlife/Lilypad/200.092/210.338
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
01-28-2009 20:59
I think there are also problems caused by using certain punctuation marks - I'm not sure what exactly, but several people have mentioned some, and I think I got the Forbidden message as a result of asterisks, slashes, or some such once or twice.
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Stella Luminos
Unregistered User
Join date: 16 Aug 2008
Posts: 68
01-28-2009 21:53
Yeaaahh... I wasn't able to post new threads for 4 days just because of the words I included in my posts! This is censorship!
Adam Marker
new scripter
Join date: 2 Jan 2004
Posts: 104
newreply.php
01-30-2009 09:36
Thanks so much for this post. I had the text "sellect xxx from the gear menu". I had already deleted a bunch of other stuff suspecting a problem like this, but without a clue, very difficult.

Regarding other problem characters ... in other forums talking about this issue, some suggested problems with things that could be interpreted as "relative path names" in UNIX, like dot-dot-slash.

* had to misspell the word "sellect" to get this to post. and take out the literal version of dot-dot-slash.
Alister Snoats
Registered User
Join date: 21 Jan 2008
Posts: 8
testing,
06-28-2009 00:27
testing, testing.

edit: ... ah-ha... i am also chronically getting this message with my main account; i can't post any messages at all to the forum. i have none of the sql keywords in my posts. what's up?
Marcus Perry
Registered User
Join date: 22 Nov 2006
Posts: 87
06-28-2009 01:21
I am not getting "Forbidden" I am getting a simple "Not Found". No matter how much I edit the post, it wont let me. No matter wether replying to an old thread or starting a new one.

This is ridiculous. Whoever is responsible for the forum better fix this fast because this is severly hindering community communications.
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2009 02:36
I think there's a new problem involving the use of less than signs. Put a space after any less than signs.

I'm not sure if that problem produces the different error message or not. There are recent threads on it pertaining to the need of putting a space after a less than sign when attempting to post a vector in LSL. These threads could be found by inspection by checking threads for the past week.

If that's not the "Not Found" problem, then you might try clearing your cookies and or your browser cache.

The forums have been extra bad in the past few weeks.
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Maureen Boccaccio
TWJKFA
Join date: 28 Feb 2008
Posts: 14,484
06-28-2009 03:33
Don't know if anyone has mentioned this, but some people were getting this error because they were using the Enhanced (wysiwyg) Editor for these forums. Once I switched to either the basic or standard editor, I stopped getting errors. (found in the User Control Panel, under Edit Options. It's the last box.)
Marcus Perry
Registered User
Join date: 22 Nov 2006
Posts: 87
06-28-2009 04:51
No joy. My post doesn't contain any less than signs. I switched the editor to basic AND to standart. Still the same problem.
Void Singer
Int vSelf = Sing(void);
Join date: 24 Sep 2005
Posts: 6,973
06-28-2009 05:54
there's one involving the word "code" that I haven't been able to track down, and directory level commands like dot dot slash (which I reported 2 years ago) also trigger either the 403 or 404 messages.
_____________________
|
| . "Cat-Like Typing Detected"
| . This post may contain errors in logic, spelling, and
| . grammar known to the SL populace to cause confusion
|
| - Please Use PHP tags when posting scripts/code, Thanks.
| - Can't See PHP or URL Tags Correctly? Check Out This Link...
| -
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2009 08:58
Yep, just tried the . . / , got the 404

Can't keep 'em all straight anymore.

Plus, in addition to these content based malfunctions, the forum system just plain fails at times.

At least forums.secondlife.com doesn't times crash my browser like the blogs.secondlife.com does at times.

If the problem is content based, you can take a screenshot of the text that doesn't work, put it on Flicker, Photobucket, ImageShack, etc., and post an image of the text, or you could use a site like cl1p.net to store the text at and post a link, or you could post the question in Second Life Answers and post a link to here in that question and post a link to that question in here.
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-