Thread

Hello,

we are occationally getting “Forbidden” error page upon logout from CP.
The weird thing is that it does not happen always, but occationally.

Forbidden

You don’t have permission to access /admin.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.3 Server at http://www.domain.org Port 80

http://www.domain.org/admin.php?S=33f744b6af795aaa8143335baae9d40c5dd4d404&D=cp&C=login&M=logout

Any ideas what could cause such behaviour?

We’re on EE 2.2.2

Yuri,

I’m sorry this happens on occasion. The error about the 404 is a server related issue, but the cause of it, the

Forbidden

You don’t have permission to access /admin.php on this server.

may be something we can help with. Obviously you have access to admin.php or you wouldn’t have logged into the Control Panel in the first place 😉 Are you using .htaccess in any way?

Cheers,

Yuri,

I looked at the error a little more an noticed the bit about SSL. Are you using https to access your CP at all? It would seem that you *may* have logged in via https, but the logout link isn’t using https and may be the cause of this?

Cheers,

Hi Dan,

I’m using .htaccess to remove index.php and also to re-write some URLs.

I’ll put attention to https - however I don’t think it ever has been used.

Btw, system files are placed out of web root, if that maked any difference

Yuri,

When using .htaccess, are you using the Officially Supported method? If you temporally disable your .htaccess, does the problem persist?

Dan,

out .htaccess is more complicated than the one offered by “Official” method. We’ll try disabling it. But again, this does not happen always.
HTTPS is not used.

We talked to hosting provider and they seem to have fixed the issue.
Not sure what exactly they did, but that involved suPHP.

Thanks for your assistance.

Glad you were able to figure out what the problem was. Don’t hesitate to post again as needed.