I’m trying to use lightOpenID, which should be simple and a case of uploading the files then testing it works.
When I use the example-google.php I get click the login button, the first time it asked me to login to Google and allow/remember the site I’m building. Then it redirects back to example-google.php?login and a load of attributes. But that page says “Forbidden. You don’t have permission to access path/to/folder/example-google.php on this server.”
if I delete the attributes including ?login in the url, then I get the “Login with Google button” so clearly I do have file permissions correct.
If I click that button from now on it redirects me to the forbidden page right away, so clearly Google is remembering I’m logged in and happy with my site using the login.
I’ve rattled my brain over this, tried searching for help and all sorts. Any help is appreciated but I’m near the point of abandoning openid (because the other libs seemed more trouble to implement).
After a lot of searching on this very issue, I got it to work. The issue is likely that your apache server or hosting provider’s apache server has mod_security configured to block URLs in querystrings. My hosting provider is Hostgator, and all I did was ask them to whitelist my domains, and it stopped giving me the 403.