CODEWITHSUNDEEP
drupaldrupal-6
aneuryzm
aneuryzm

Reputation: 64844

Drupal: admin/user/profile gives server Error 403 - Forbidden: Access

I have a Drupal website on Godaddy.com (with IIS 7).

The weird thing is that I cannot access to the "/admin/user/profile" page to change users profiles (drupal Profile module).

I get this error:

Server Error 403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.

All other pages in the administration are instead accessable. E.g. /admin/user/

What could be the issue ? I don't think it is a permission issue because I get a Server Error...

thanks

Upvotes: 0

Views: 3667

Answers (3)

mark
mark

Reputation: 213

I'm on GoDaddy / IIS7 / Drupal6. 'profile' is not reserved by GoDaddy.

Judging by your url '/admin/user/profile' you probably have Clean URL's enabled? If so, and you started the sample web.config on dupal.org, then check your web.config carefully for the rule:

    <rule name="Protect files and directories from prying eyes" stopProcessing="true">
      <match url=".(engine|inc|info|install|module|profile|test|po|sh|.sql|postinst.1|theme|tpl(.php)?|xtmpl|svn-base)$|^(code-style.pl|Entries.|Repository|Root|Tag|Template|all-wcprops|entries|format)$" />
      <action type="CustomResponse" statusCode="403" subStatusCode="0" statusReason="Forbidden" statusDescription="Access is forbidden." />
    </rule>

You'll need to remove the 'profile' and 'module' (for /admin/by-module) entries from the rule's match tag.

    <rule name="Protect files and directories from prying eyes" stopProcessing="true">
      <match url=".(engine|inc|info|install|test|po|sh|.sql|postinst.1|theme|tpl(.php)?|xtmpl|svn-base)$|^(code-style.pl|Entries.|Repository|Root|Tag|Template|all-wcprops|entries|format)$" />
      <action type="CustomResponse" statusCode="403" subStatusCode="0" statusReason="Forbidden" statusDescription="Access is forbidden." />
    </rule>

Upvotes: 0

mirzu
mirzu

Reputation: 1831

Run! get off GoDaddy hosting as fast as you can! These kinds of work arounds are silly and there are plenty of hosts out there that won't put these barriers up for you. I have never, never ever had any luck with them.

Upvotes: 0

berkes
berkes

Reputation: 27573

If, as you comment, /profile/ is a reserved word, there are a few solutions:

  1. Move to another host (or threaten to do so with your current host). Really, a hoster that has reserved urls is not worth your money.
  2. Add aliases with the core path module. Enable that module at Administer » Site Building » URL aliases.
  3. Add aliases in the database, no path-module needed. Just add a record for "/admin/user/profile": INSERT INTO url_alias (src, dst) VALUES('admin/user/profile', 'admin/user/eliforp').

Upvotes: 1

Related Questions