Home/ Questions/Q 8865847
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-14T16:37:40+00:00

Possible Duplicate: 403 Forbidden Error While Sending GET Data When a $_GET variable contains

  • 0

Possible Duplicate:
403 Forbidden Error While Sending GET Data

When a $_GET variable contains the value “http://abc.com“, the page returns “Forbidden. You don’t have permission to access /get.php on this server.”

You can try it out at http://softwareholic.com/get.php (output with var_dump($_GET);)

These are ok

softwareholic.com/get.php?link=123 //output: array(1) { ["link"]=> string(3) "123" } 
softwareholic.com/get.php?link=http:// //output: array(1) { ["link"]=> string(7) "http://" }

These will fail

softwareholic.com/get.php?link=http://google.com  
softwareholic.com/get.php?link=http%3A%2F%2Fgoogle.com

The thing is they worked on my localhost and downtownhost.com. The problem shows up only on hostgator.com. I have also remove .htaccess to narrow things down.

Any ideas?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Your host is enforcing the 403 as a security measure, probably in an attempt to prevent Open Redirect vulnerabilities.

    Do you really need to redirect to any given URL by the user? How about storing possible URLs in a database table, and passing in the ID in the querystring, then lookup and redirect.

    • 0