You don’t have permission….

  • I’ve written this same post twice. Each time I get to a point where it will no longer save or post, and instead tells me I don’t have permission.

    “You don’t have permission to access /blog/wp-admin/post.php on this server.”

    Up to that point it would save. If I add material after that, it won’t, but if i delete it, it will.

    I did a search. Some suggested permissions. I have checked all permissions. They are 755. Someone else suggested it was serverside, but I don’t understand how that could be; why would the server allow one sized post and not another? Another wierd thing is that in the past, I feel certian I’ve made posts larger than this.

    This post has:

    1) Text
    2) 4 centered images, .jpgs, each between 10 and 20 kb

    Thank you very much for your time,

    Kyle

Viewing 9 replies - 1 through 9 (of 9 total)

  • Well you say the permissions are 755. Try setting them to 777 and seeing if that works ??

    What is the exact text of the post you are trying to make? It is likely your host has mod_security enabled and one of the words you are using is tripping it.

    Thread Starter locrian

    (@locrian)

    The post of the text it won’t let me add is:

    “The two at the top with the triangle and dot are measures of divergence; this is the amount that the field (E for electric, B for magnetic) points straight out from a point or in a volume. Electric charge causes electric field divergence. There is no divergence of magnetic fields because there is no magnetic charge. The bottom two equations measure curl; this is the amount that the fields curl around a point or in a volume. An example of a thing that diverges would be light rays straight from a source; something that curls might be the vortex that forms in water as it spins down the drain.”

    Nerd stuff, I can’t imagine what security it would trip. On the other hand, there is a post I did on maxwell’s equations a long time ago that suddenly developed the same problem; it’s there, but it won’t let me edit it.

    You think that’s the problem?

    And 777 is a bad idea, yes?

    Yep it’s the word curl that is doing it, where ever you have curl before the word instead of having a normal space type:
     

    That should get you past the filter, for example:

    measure&curl

    Thread Starter locrian

    (@locrian)

    Holy cow, that seems to be it! That’s crazy. What the heck does the word curl have to do with security? I haven’t gotten your   command to work yet. It seems I can have the word in there a couple of times, but after that, it’s over. Maybe I’ll use the HTML for the cross symbol instead.

    Thanks so much for your help, this was driving me batty!

    Curl is a command on *nix servers that retrieves a file over the internet and hence is sometimes deemed a security risk so just in case someone manages to exploit your site with a carefully crafted POST payload they prevent you from using the word curl at all so even if your site does get exploited they can’t download a root kit or some other malicious software to your server and wreak havoc.

    Personally I think filtering POST requests is a little overboard but a lot of shared hosts do it.

    Thread Starter locrian

    (@locrian)

    Very interesting. I’ve decided to just spell it curll from here out. I mispell every other word anyhow, so what’s the harm?

    Thanks so much for your help Jaseone. I couldn’t have asked for better.

    I’ve just noticed the very same thing with nmap.

    Hi,
    I am having a similar problem. I am using BLIX theme and I just wanted to replace the emails (written in text) with images just to get rid of spams. I get a warning – no permissions to access wp-admin/post.php on this server. I have tried changing permissions but that did not help.

    I am able to add and delete pages but not make modifications in it. All that I wanted was to replace the email with <img src=”images/a_arial.jpg”>

    Any help will be highly appreciated.

    sha

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘You don’t have permission….’ is closed to new replies.