Discussion Forums  >  Uncategorized

Replies: 11    Views: 312

Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
11/10/11 09:27 AM (12 years ago)

BT Server - Hostgator problem resolved - may help someone else

''Add or Update plugins'' and ''refresh plugins'' in the admin area generate a url with 1=1 in it, like this: http://mywebsite.com/admin/plugin_add.php??1=1&from=plugins&status=&searchInput=search...&sortColumn=P.displayAs&sortUpDown=ASC¤tPage=1&viewStyle=listView and: http://mywebsite.com/admin/plugins.php?1=1&from=plugins&status=&searchInput=search...&sortColumn=P.displayAs&sortUpDown=ASC¤tPage=1&viewStyle=listView&command=refreshPlugins The 1=1 gets flagged and blocked by hostgator as it looks like a sql injection, so the url goes to a 403 forbidden page. The first time I contacted hostgator, they refused to whitelist the urls as the guy said it would open up the domain to genuine sql injection attacks. I thought this was a certain amount of b*llsh*it on the part of the guy I was speaking to. Contacted them again today, spoke to someone different, and the urls were whitelisted instantly - now it finally works! So, considering hostgator is a major hosting provider and BT Server will eventually be out of beta and out in the wild, this issue may crop up a lot, and may or may not be put right by hostgator, depending on who you speak to. Maybe it's something the BT Devs could look at to avoid future complications?
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 09:33 AM (12 years ago)
btw, it's hostgator shared hosting - ''babycroc''
 
COOKUP
Aspiring developer
Profile
Posts: 259
Reg: Aug 02, 2011
Coral Sprigs, F...
7,140
like
11/10/11 09:46 AM (12 years ago)
this has been driving me crazy!! Can't install plug-ins!! So i gotta call Host gators huh!! Well, wish me luck!!
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 09:52 AM (12 years ago)
Good luck dude! Use the chat option in cpanel. Depending on who you speak to they'll either do it or not. Either way, it'll only take a few minutes.
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 09:59 AM (12 years ago)
I guess I should have said type them a message in live chat support, rather than speak to them...
 
COOKUP
Aspiring developer
Profile
Posts: 259
Reg: Aug 02, 2011
Coral Sprigs, F...
7,140
like
11/10/11 10:22 AM (12 years ago)
YEEEES!!! Thanx raveyd I called and they did it for me. Great help.
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 10:27 AM (12 years ago)
Excellent! It seems to be working perfectly for me now, hope it's the same for you!
 
David @ buzztouch
buzztouch Evangelist
Profile
Posts: 6866
Reg: Jan 01, 2010
Monterey, CA
78,840
like
11/10/11 10:27 AM (12 years ago)
This is interesting. The fix(es) are super easy. We didn't realize that a 1=1 in the URL is something hosting providers filter out or look for. Makes some sense after thinking about it. The 2.0.7 project was just updated again (same version with all the 1=1's removed from the plugin screens) so you can either update the entire project or just overwrite whats in your /admin folder. This should take care of the HostGator thing. Download it, unzip, update the /admin folder. 1=1's will in plugin screens gone. @raveyd: Great work and thx!!!
 
COOKUP
Aspiring developer
Profile
Posts: 259
Reg: Aug 02, 2011
Coral Sprigs, F...
7,140
like
11/10/11 10:32 AM (12 years ago)
@raveyd Works perfect!!!Thanx again
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 10:44 AM (12 years ago)
Thanks David, I've just updated admin and it seems to be working fine still.
 
Paul Rogers
Android Fan
Profile
Posts: 2524
Reg: May 30, 2011
UK
35,740
like
11/10/11 10:45 AM (12 years ago)
@COOKUP - Great news!
 
mrDavid
BTMods.com
Profile
Posts: 3936
Reg: May 21, 2011
San Diego, CA
51,910
like
11/11/11 12:45 AM (12 years ago)
I use hostgator, so awesome that this was fixed! Thanks!
 

Login + Screen Name Required to Post

pointerLogin to participate so you can start earning points. Once you're logged in (and have a screen name entered in your profile), you can subscribe to topics, follow users, and start learning how to make apps like the pros.