Topic on Project:Support desk

Hi,

I just installed MediaWiki on a new webspace, but I get a 403 Forbidden if for example the WikiEditor is loaded.

I have the following MediaWiki configuration:

MediaWiki   1.37.2

PHP     7.3.33 (cgi-fcgi)

Server Windows Server IIS

I set up the WikiEditor in the LocalSettings.php and it is shown as Extension in the Versions-Page (0.5.3).

When I edit a page in the wiki, there is no editor shown and when I look at the Firebug Errormessages I got a 403 error for the File

https://wiki.lothron.de/load.php?lang=de&modules=jquery%2Coojs%2Coojs-ui-core%2Coojs-ui-widgets%2Csite%7Cjquery.client%2Ccookie%2ChighlightText%2ClengthLimit%2CmakeCollapsible%2Csuggestions%2CtextSelection%2Cthrottle-debounce%2Cui%7Cjquery.makeCollapsible.styles%7Cmediawiki.String%2CTitle%2Capi%2Cbase%2Ccldr%2CconfirmCloseWindow%2Ccookie%2Cicon%2CjqueryMsg%2Clanguage%2Cstorage%2Ctemplate%2Cuser%2Cutil%7Cmediawiki.action.edit%7Cmediawiki.action.edit.collapsibleFooter%2CeditWarning%7Cmediawiki.language.specialCharacters%7Cmediawiki.libs.pluralruleparser%7Cmediawiki.page.ready%7Cmediawiki.page.watch.ajax%7Cmediawiki.widgets.visibleLengthLimit%7Coojs-ui-widgets.icons%7Coojs-ui.styles.icons-alerts%2Cicons-content%2Cicons-editing-advanced%2Cicons-editing-citation%2Cicons-editing-core%2Cicons-editing-list%2Cicons-editing-styling%2Cicons-media%7Cskins.monobook.scripts%7Cuser.defaults&skin=monobook&version=yljmj

If I try to open the link without the modules like this it will load the load.php without errors.

https://wiki.lothron.de/load.php?lang=de&skin=monobook&version=yljmj

Are there any special folders to CHMOD on a windows server to get mediawiki run?

Regards,

Stephan

Check your webserver error log, it will hopefully tell you why the page was forbidden.

This is probably not a chmod (or cacls or whatever windows calls it) issue.

Can find only, that is a 403.0 error für the GET request of the link above.

There are some hint the web that this related to SSL certificates. But the webspace is secured as all my other webspaces with a LetsEncrypt certificat.

In my experience 403s that only occur on one or two urls, are generally related to WAFs like mod_security being carelessly deployed and hitting false positives in MWs code.