Can't access first aid records

General
1

Good afternoon.
I get a 403 error when I try to access index.php?q=/modules/Students/firstAidRecord.php. I’ve tried using the link from various pages without success.
Please help.

Logged in as System Admin.

2

Hi simoneg,

A 403 error is an Access Denied/Forbidden error, the most likely cause is the permissions of the firstAidRecord.php file in your <code class="CodeInline">/modules/Students/ directory. This feature was added in recent versions, so it’s possible after updating your version that these files were added but haven’t had their permissions set.

Hope this helps!

Edit: I’ve removed your other duplicate thread.
3

Thanks. It has 644 permission. What should it be?

4

Forbidden
You don’t have permission to access /gibbon/index.php on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

5

Hi Simon, I wonder if this is some kind of server config issue. Can you tell us more about the server stack you are running Gibbon on? Thanks, Ross.

6

Hi Ross, I hope this is the information you need…
Thanks, Simone.

7

Hi Simone,

To help clarify, your recent post mentions this error: “You don’t have permission to access /gibbon/index.php on this server.” Are you now seeing this error when trying to access every file, or is it only happening when accessing the firstAidRecord.php file?

Thanks!

8

Si Sandra,

So far the only page I have found inaccessible with this error is the First Aid Record page.

Thanks

9

Hi Simone, thanks for sharing your server config information. I wonder if your host has any special PHP mods, like mod_security, which might be impacting this one page. I’ve seen this happen with shared hosting and WordPress before. Might be worth checking with your host’s support team. Ross.

10

If it’s just the one file, I wonder if it’s ended up with different permissions than the rest of the files. Perhaps check the file permissions & ownership of firstAidRecord.php and compare it to the other files in that folder, and update the permissions & ownership to match them if it’s different.

11

Hi Ross, You were right; mod_security was the culprit. I disabled it and the first aid records were accessible. I don’t want to leave it disabled so is there some other way around this?

12

Sorry Sandra, missed your reply. It has 644 as do the others.

13

Hi Simone, I’ve not actively used mod_security. Is there any way of enabling it and then checking the logs to see what exactly is causing it to break? If you can work that out, then we can try and get it fixed. Ross.

14

Hi Ross, Okay. This is what it says in my access log:

[09/Mar/2018:10:06:16 +0800] “GET /gibbon/index.php?q=/modules/Students/firstAidRecord.php HTTP/1.1” 404 - “http://ris-portal.edu.my/gibbon/index.php?q=/modules/Students/student_view.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36”

175.136.221.84 - - [09/Mar/2018:10:07:15 +0800] “GET /gibbon/index.php?q=/modules/Students/firstAidRecord.php HTTP/1.1” 404 - “http://ris-portal.edu.my/gibbon/index.php?q=/modules/Students/student_view.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36”

175.136.221.84 - - [09/Mar/2018:10:42:21 +0800] “GET /favicon.ico HTTP/1.1” 404 - “http://ris-portal.edu.my/gibbon/index.php?q=/modules/Students/firstAidRecord.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36”

175.136.221.84 - - [09/Mar/2018:10:43:55 +0800] “GET /gibbon/index.php?q=/modules/Students/firstAidRecord.php HTTP/1.1” 404 - “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0”
175.136.221.84 - - [09/Mar/2018:10:43:55 +0800] “GET /favicon.ico HTTP/1.1” 404 - “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0”

15

These are from the access log, can you find the error log?

16

There are no errors in the error log. I’ve checked with my host and they confirmed this.

17

Interesting. Do you feel able to try a little debugging? In short you could comment out certain chunks in the offending file until you find a chunk that causes it to stop failing in this exact way, before narrowing down to the exact problem. Doable?

18

I’ll give it a go!

So I do this in the firstAidRecord.php?

19

Correct, yes : )