Why can I not complete a logout operation on my shared-hosting instance of OSQA?

I installed the current release of OSQA (Fantasy Island v0.9.0 Beta 3) on shared hosting by following the fastcgi installation articles in the wiki.

Some operations result in a 404 error, such as clicking on the Logout button that appears after clicking the logout link at the top of every page. The address that causes the 404 error is:

http://my.domain.com/account/signout/?next=http://my.domain.com

If I remove the ?next=... part from the browser's address bar, the logout operation goes through without errors. Also, if I manually append a trailing slash at the end of the URL above, the logout goes through without errors. However, I cannot get OSQA to include that trailing slash on its own.

I also got a 404 error when I tried to logging in using a Google account, but I can't tell if this is related.

PS. I am using an sqlite database currently while testing the software.

asked 07 Jan, 01:02

akhayyat
11●3
accept rate: 0%

edited 09 Jan, 16:30

I'm having the same problem with my OSQA test installation. The error log indicates that mod_security is blocking the request because it thinks it is an injection attempt:

[Thu Jan 12 10:42:17 2012] [error] [client 50.23.15.142] ModSecurity: Access denied with code 403 (phase 2). Match of "beginsWith http:/%{SERVER_NAME}/" against "MATCHED_VAR" required. [file "/opt/mod_security/10_asl_rules.conf"] [line "471"] [id "340162"] [rev "244"] [msg "Atomicorp.com WAF Rules: Remote File Injection attempt in ARGS (AE)"] [data "http:/"] [severity "CRITICAL"] [hostname "qa.iggsandbox.com"] [uri "/account/signout/"] [unique_id "Tw7-WbitCFkAAH-cOXwAAADK"]

I'm not willing to disable mod_security - how can we resolve this?

(12 Jan, 10:50) igg_jon

Be the first one to answer this question!

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

404 ×15
shared ×5
slash ×2
logout ×1

Asked: 07 Jan, 01:02

Seen: 230 times

Last updated: 12 Jan, 10:50

Why can I not complete a logout operation on my shared-hosting instance of OSQA?

Follow this question

Learn more about OSQA

Related questions