Support

sysmesh · #11 10-13-2011, 01:09 PM

update: file uploads (images) to posts fail too (HTTP error) with nothing in the debug log that indicates an error :-(

mistwang · #12 10-13-2011, 01:20 PM

Please check if PHP suEXEC is function properly or not.
write test PHP script to run "id" command, see if php processes is running as correct user ID.

I assume you are using PHP suEXEC, each web site uses its own lsphp5 running as the user id of the owner of the site.

sysmesh · #13 10-13-2011, 01:24 PM

Actually all websites are under www-data (same user) as all are owned by us.

mistwang · #14 10-13-2011, 02:21 PM

then make sure lsphp5 were running as www-data. Please show us the actual error.

sysmesh · #15 10-13-2011, 10:40 PM

Hi,
LSphp is running under www-data (see attached).
Error 403 still happens (also attached).

I wish the logs would give me a hint of the cause but they seem useless as they show no errors or issues :-(

Anything else i can try?

webizen · #16 10-14-2011, 09:51 AM

you may also check stderr.log (e.g. /usr/local/lsws/logs/stderr.log) and syslog (e.g. /var/log/messages).

also check the ownership of your upload directory.

mistwang · #17 10-14-2011, 02:48 PM

Quote:

Originally Posted by sysmesh

Hi,
LSphp is running under www-data (see attached).
Error 403 still happens (also attached).

I wish the logs would give me a hint of the cause but they seem useless as they show no errors or issues :-(

Anything else i can try?

For those 403 error, LSWS should log something about it. maybe you can turn on debug logging and try again. make sure debug level is "HIGH", log level is at "DEBUG".

sysmesh · #18 10-15-2011, 12:33 AM

I think I might have found a solution: In the security settings of the server setup I've set the "check symbolic links" to "no" and it started to work again.
Thanks for your help!

sysmesh · #19 10-15-2011, 03:04 AM

mistwang · #20 10-15-2011, 03:44 PM

You can locate and comment out that rule, or use

SecRuleRemoveById xxxxx

to exclude that rule for that URL.
Maybe you enabled Request Body scan by default, which may cause trouble with gotroot rules.