Share: Getting 'Forbidden' message when sharing externally

Asked Oct 30 '17 at 17:20

Active Nov 12 '17 at 20:50

Viewed 38 times

I've run into an odd issue and I can't seem to figure out what is going on.

Normal Process:

I click the Share arrow on a disabled entry.
I copy the tokenized link and send it out.
Folks without accounts are able to preview the page.

What is happening now:

I click the Share arrow on a disabled entry.
I copy the tokenized link and send it out.
Folks without accounts are given a 'Forbidden' warning. If I refresh my preview page, I also get the same warning.

NOTES: There is no authentication required to access the template itself.

I checked the latest updates to Craft but did not see anything obvious that might affect that. I double-checked that the token time extension that we added in general.php and it's still set to a week.

Any ideas?

edited Nov 12 '17 at 20:50

Lindsey D

23,974
5
53
110

asked Oct 30 '17 at 17:20

craftyguestsjt

Can you post a screenshot of the Forbidden warning? It sounds like it's coming from the web server instead of Craft. – Brad Bell Oct 30 '17 at 20:12
Also, does the template you're trying to share have any sort of authentication logic in it? – Brad Bell Oct 30 '17 at 20:13
@BradBell Updated, and no. It's just an article posting. – craftyguestsjt Oct 31 '17 at 11:18
Hrm... is mod_security or Suhosin installed on that server? – Brad Bell Oct 31 '17 at 17:18
@BradBell Nope. – craftyguestsjt Oct 31 '17 at 18:37
Is /en/index.php the same entry point that Craft uses to load normal requests? i.e. the rest of the site and the Control Panel loads fine? – Brad Bell Oct 31 '17 at 20:50
@BradBell Yup! We can access the rest of the site and control panel items just fine. We only seem to encounter this error when we try to share a disabled entry. – craftyguestsjt Nov 01 '17 at 17:13
I'm officially out of ideas. ¯_(ツ)_/¯ I can't imagine how a non-Craft authenticated request would cause an Apache 403 forbidden response. – Brad Bell Nov 01 '17 at 18:51

Share: Getting 'Forbidden' message when sharing externally

0 Answers0