Softaculous


Topic : WebMail Lite ReCaptcha and Apache


Posted By: peopleinside on June 26, 2015, 7:51 am
Hi,
I'M using WebMail Lite for access to the webmail. WebMail Lite is great and I had installed it from my Webuzo Panel.
For security reason I want activate the Captcha security on the login page so I followed the relative guide at this address:
http://www.afterlogic.com/wiki/Displaying_CAPTCHA_on_login_screen_%28WebMail_Plugins%29?WM=Lite

but when I load the login page after the required edit,
the login page is not loaded.
In error server log I can see the "client denied by server configuration" error.

I asked to AfterLogic and they says is an error about my Apache configuration.
Now I don't understand why all I have installed on my server works fine and only this generate this error.

Maybe recaptcha are requesting something of bad, i should change something in the Apache for allow this?

Will allow this a security threat? And hot to fix this error if is not a security risk?

Also in the log I see someone tried to access to my .htaccess file and was denied by the server in the error log with the same error,
in this case I think it is good. Someone has tried to access to my .htaccess file and this is not good so is good Apache has blocked it.

Should I change something in the Apache for skip the Client denied for the recaptcha or not?
What i should change for fix this issue?

*************************************************************************

[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: webMailLite/data/plugins/recaptcha/js/bootstrap.min.js, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/js/bootstrap.min.js, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:59 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/recaptcha/css, referer: https://www.mywebsite.ext/web-mail/data/plugins/recaptcha/index.php
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:45 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/js, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:44 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/css, referer: https://www.mywebsite.ext/web-mail/data/plugins/
[Tue Jun 23 00:10:44 2015] [error] [client IP] client denied by server configuration: web-mail/data/plugins/

**********************************************************

Thanks


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.

Posted By: peopleinside on August 3, 2015, 9:11 pm | Post: 1
Finded,
the error was because Web Lite has a wrong guide.
Now i have alerted of the error Afterlogic.

You find in the guide for activate captcha to put this code:

'plugins.recaptcha' => true,
'plugins.recaptcha.options.public-key' => '...',
'plugins.recaptcha.options.private-key' => '...',
'plugins.recaptcha.options.limit-count' => 0

you have to replace with this one
'plugins.recaptcha' => true,
'plugins.recaptcha.options.public-key' => '...',
'plugins.recaptcha.options.private-key' => '...',
'plugins.recaptcha.options.limit-count' => 0,



-----------------------
PeopleInside  :angel:

Web, security, open source passionate.

Powered By AEF 1.0.8 © 2007-2008 Electron Inc.