Argo Links 403 Error

  • Resolved justmattb

    (@mwbarker)


    12 years ago

    Trying out a new plugin, called Argo Links:
    https://argoproject.org/argo-links.php

    Included with it is a bookmarklet that allows you to capture the URL from the website and add it to a list of links in your WordPress site. BulletProof Security is blocking the requests, resulting in a 403 on the pop-up. This is what the bookmarklet looks like:

    javascript:var d=document,w=window,e=w.getSelection,k=d.getSelection,x=d.selection,s=(e?e():(k)?k():(x?x.createRange().text:0)),f='https://www.mysite.com/wp-content/plugins/argoproject-argo-links-ec58e2a/argo-this.php',l=d.location,e=encodeURIComponent,u=f+'?post_type=argolinks&u='+e(l.href)+'&t='+e(d.title)+'&s='+e(s)+'&v=4';a=function(){if(!w.open(u,'t','toolbar=0,resizable=1,scrollbars=1,status=1,width=720,height=570'))l.href=u;};if (/Firefox/.test(navigator.userAgent)) setTimeout(a, 0); else a();void(0)

    This is what the BPS error log shows:

    >>>>>>>>>>> 403 GET or Other Request Error Logged - March 20, 2013 - 3:36 am <<<<<<<<<<<
REMOTE_ADDR: editedout
Host Name: editedout
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: editedout
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://www.fromaway.com/features/how-to-start-a-food-blog
REQUEST_URI: /wp-content/plugins/argoproject-argo-links-ec58e2a/argo-this.php?post_type=argolinks&u=http%3A%2F%2Fwww.fromaway.com%2Ffeatures%2Fhow-to-start-a-food-blog&t=How%20to%20Start%20a%20Food%20Blog&s=&v=4
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22

    I have tried to update the .htaccess file with this line, but it does not help:

    # Argo Links
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/argoproject-argo-links-ec58e2a/ [NC]
RewriteRule . - [S=13]

    Any other way around this?

    https://www.ads-software.com/extend/plugins/bulletproof-security/

Viewing 15 replies - 31 through 45 (of 47 total)
  • Plugin Author AITpro

    (@aitpro)

    I wonder if it is something stupid like this. Try removing HEAD from the Request Method filter.

    Thread Starter justmattb

    (@mwbarker)

    RewriteCond %{REQUEST_METHOD} ^(TRACE|DELETE|TRACK|DEBUG) [NC]

    No change.

    Plugin Author AITpro

    (@aitpro)

    Ok completely out of ideas now. Is this a premium plugin? Can I download a copy of it somewhere?

    On the backburner and will have to get back to this another time. Thanks.

    Thread Starter justmattb

    (@mwbarker)

    That’s okay; I really appreciate the time you’ve given to this!

    Thread Starter justmattb

    (@mwbarker)

    It is not a premium plugin, you can download it from the Git Repository here:
    https://github.com/argoproject/argo-links

    Plugin Author AITpro

    (@aitpro)

    Ok then I will give it a test drive later on today and post my findings back here. Thanks.

    Thread Starter justmattb

    (@mwbarker)

    Guess I should have looked at the issues page:
    https://github.com/argoproject/argo-links/issues/6

    Looks like others are running into this. The very, very, very odd thing about this is that I did have it working with other sites at some point. Will have to play with this locally and see if I can replicate any of this. Have made so many changes playing around with this today that I can’t tell up from down anymore.

    Just sent you a donation for your troubles – and for all the help you’ve given me in the past. Much appreciated.

    Plugin Author AITpro

    (@aitpro)

    Thanks for the donation!!!

    Yep, it looks like maybe some code needs to be modified in the plugin. I will install it and see what is up. If the coding modification is something simple then I’ll send you a working plugin. ??

    Thread Starter justmattb

    (@mwbarker)

    No worries; thank you! I went ahead and tested locally from 3.3.1 up to 3.5.1 and with vanilla installs, everything seemed okay. Wondering if it is something else going on. Maybe theme… Maybe hosting environment… Just don’t know.

    With the local install (3.5.1), when I added BPS, I initially got the same error message, but just adding argo-this\.php to RewriteCond %{REQUEST_URI} piece fixed it. Doing that allowed me to add URLs from my site and from other sites. Really, really strange behavior right now that I can’t seem to pin down.

    Plugin Author AITpro

    (@aitpro)

    Yep, logically all that “should” be required based on what the plugin is trying to do is just whitelisting the argo-this.php file.

    I just finished up testing another plugin so I will be starting testing now on this plugin, but it sounds like you have got this plugin fully working on a XAMPP (MAMP, LAMP, WAMP) installation. Is this correct?

    Thread Starter justmattb

    (@mwbarker)

    Yeah (MAMP). Still scratching my head with the site I am actually trying to use this on, but hoping I’ll figure it out. At least I know it does work.

    Plugin Author AITpro

    (@aitpro)

    I have noticed some differences when testing on XAMPP vs a Live site on a Hosted Server so I will test in both environments.

    Thread Starter justmattb

    (@mwbarker)

    Looks like it might be a hosting environment thing. Just did vanilla install of the Argo Links plugin over at HostGator and cannot add a link from an external site (404 error). Will have to check with them.

    Plugin Author AITpro

    (@aitpro)

    hmm a 404 and not a 403 error then this has to do with URL’s/URL structure/permalinks. That is definitely one of the major differences between MAMP/XAMPP and live hosting.

    Thread Starter justmattb

    (@mwbarker)

    Okay, so I did need the change you sent me earlier:

    RewriteCond %{REQUEST_URI} (argo-this\.php|timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC]

    But after that, it looks like it was a mod_sec rule in place in my hosting environment (HostGator) that was preventing me from capturing URLs outside of my own domain. Now that they’ve fixed that for me, this is finally working. Thanks again!

Viewing 15 replies - 31 through 45 (of 47 total)
  • The topic ‘Argo Links 403 Error’ is closed to new replies.