Home/ Questions/Q 267065
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T23:29:42+00:00

Given hello.php: <?php echo Hello; ?> rendering the page works fine and returns Hello

  • 0

Given hello.php:

<?php echo "Hello"; ?>

rendering the page works fine and returns Hello, however

http://example.com/hello.php?test=http%3a//whatever.com

returns a 403 Forbidden. But oddly enough, making the first letter of http uppercase works fine:

http://example.com/hello.php?test=Http%3a//whatever.com

FYI, percent encoding the slashes also 403s:

http://example.com/hello.php?test=http%3a%2f%2fwhatever.com

I’m beginning to suspect this may be an issue with Passenger (which I use to serve RoR)

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It is mod_security’s 10_asl_rules.conf causing this error.

    • 0