Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : WebMail Lite ReCaptcha and Apache



Threaded Mode | Print  

 WebMail Lite ReCaptcha and Apache (1 Replies, Read 16191 times)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Hi,
I'M using WebMail Lite for access to the webmail. WebMail Lite is great and I had installed it from my Webuzo Panel.
For security reason I want activate the Captcha security on the login page so I followed the relative guide at this address:
http://www.afterlogic.com/wiki/Displaying_CAPTCHA_on_login_screen_%28WebMail_Plugins%29?WM=Lite

but when I load the login page after the required edit,
the login page is not loaded.
In error server log I can see the "client denied by server configuration" error.

I asked to AfterLogic and they says is an error about my Apache configuration.
Now I don't understand why all I have installed on my server works fine and only this generate this error.

Maybe recaptcha are requesting something of bad, i should change something in the Apache for allow this?

Will allow this a security threat? And hot to fix this error if is not a security risk?

Also in the log I see someone tried to access to my .htaccess file and was denied by the server in the error log with the same error,
in this case I think it is good. Someone has tried to access to my .htaccess file and this is not good so is good Apache has blocked it.

Should I change something in the Apache for skip the Client denied for the recaptcha or not?
What i should change for fix this issue?

*************************************************************************

[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: webMailLite/data/plugins/recaptcha/js/bootstrap.min.js, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/js/bootstrap.min.js, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/css, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:44 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/css, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:44 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/

**********************************************************

Thanks


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

WebMail Lite ReCaptcha and Apache
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Finded,
the error was because Web Lite has a wrong guide.
Now i have alerted of the error Afterlogic.

You find in the guide for activate captcha to put this code:

'plugins.recaptcha' => true,
'plugins.recaptcha.options.public-key' => '...',
'plugins.recaptcha.options.private-key' => '...',
'plugins.recaptcha.options.limit-count' => 0

you have to replace with this one
'plugins.recaptcha' => true,
'plugins.recaptcha.options.public-key' => '...',
'plugins.recaptcha.options.private-key' => '...',
'plugins.recaptcha.options.limit-count' => 0,



-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is March 19, 2024, 2:20 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.024