Links don't take user to actual URL - send to 403 page

rheide

Hello All,

I have attempted to search for this but I might just be using the wrong search terms.

We are having a problem where the staff/admin/users are unable to click on links inside a ticket.

The link might be: http://www.google.com(http://www.google.com)

but you can see that the code has been re-written to:

http://www.ourwebsitehere.com/scp/l.php?url=http%3A%2F%2Fwww.google.com&auth=b045157d9d32c2f293e4da35f5ed099b(http://www.ourwebsitehere.com/scp/l.php?url=http%3A%2F%2Fwww.google.com&auth=b045157d9d32c2f293e4da35f5ed099b)

then when you click on the link, you will see:

Forbidden

You don't have permission to access /scp/l.php on this server.

Are there certain permissions that maybe need to be set for that file on the server?

I do have Clickable URLs turned on and we experience the issue listed above.

If I turn it off, the links aren't clickable at all.

Thanks in advance!!!

ntozier

Works fine on my system.

The html link looks something like this (cut and pasted, but remove my companies identifiable info):

http://support.domain.org/scp/l.php?url=http%3A%2F%2Fweblibrary.domain.org%2Ftechnology%2Fincidentview.php%3Fclid%3D0&auth=

clicking on the link takes me to the web page weblibrary.domain.org/technology/incidentview.php?clid=0

I recommend that you look at your php error logs and/or your web server logs and see what error is actually being recorded. You might need to change osTickets logging level so that you can get a more verbose error.

rheide

ntozier,

Thanks for the suggestions.

I have turned on the errors by doing this:

ini_set('display_errors',1);

ini_set('display_startup_errors',1);

No errors shows up in osTicket but I do get an error on the server (FYI - I'm using cPanel with HostGator)

The error looks like this: File does not exist: /home/account/public_html/domain.com/403.shtml, referer: http://www.domain.com/scp/tickets.php?id=97(http://www.domain.com/scp/tickets.php?id=97)

So it doesn't really help much. It seems like there is some type of error when hitting l.php but since there isn't a 403.shtml page, it gets registered as an error on the server.

Any other suggestions?

Thanks!

rheide

Just checking in to see if anyone has any ideas.

I'm willing to pay to get it fixed. I've got $20 to spend (via paypal) .. I realize its not that much. Anyway, let me know if anyone has time to check it out.

We did a fresh test install on the same server and everything works fine.

Something to think about ... I THINK we originally set osTicket up using one domain and then changed it. Its been awhile and I can't remember for certainty. I feel like the issue may have something to do with that.

I have compared the file permissions from the new test install and our current install and everything looks the same. I also tried replacing the l.php file just for fun and nothing changed.

Thanks in advance!

PHPism

Hello friends.

That issue was annoying me very much.

The reason for this was because of mod_security blocking this action.

I went ahead and whitelisted the rule that it was hitting, and the link now loads.

I hope that tip can help you.

Best Regards