Re: [support] Strange AJAX error

If you have any folders that start with a . then people will be able to access them. Best thing to do is to just delete those folders if you aren't using Git on your server, or add the actual folder to the htaccess rule.

Jamie Holly http://www.intoxination.net http://www.hollyit.net

On 12/13/2012 8:28 PM, Austin Einter wrote:

Jamie What a fantastic answer!! You made my day. I just commented the line you recommended and it worked fine.

I have a .git folder as below.

sites/all/modules/betterselect/.git

So if I have a .git folder and I commented out the rule you recommended, then what problem I may face.., please elaborate..

Thanks Austin

On Thu, Dec 13, 2012 at 9:48 AM, Jamie Holly <hovercrafter@earthlink.net mailto:hovercrafter@earthlink.net> wrote:

Actually this is caused by Drupal's .htaccess file:

 # Block access to "hidden" directories whose names begin with a
period. This
  # includes directories used by version control systems such as
Subversion or
  # Git to store control files. Files whose names begin with a
period, as well
  # as the control files used by CVS, are protected by the
FilesMatch directive
  # above.
  #
  # NOTE: This only works when mod_rewrite is loaded. Without
mod_rewrite, it is
  # not possible to block access to entire directories from
.htaccess, because
  # <DirectoryMatch> is not allowed here.
  #
  # If you do not have mod_rewrite installed, you should remove these
  # directories from your webroot or otherwise protect them from being
  # downloaded.
  RewriteRule "(^|/)\." - [F]

You can remove that rule from .htaccess if you like. I would just
make sure you don't have any hidden directories, like .git.

Jamie Holly
http://www.intoxination.net  
http://www.hollyit.net

On 12/12/2012 10:45 PM, Vaibhav Jain wrote:

...

You can check once on the permissions provided in hook_menu.


On Thu, Dec 13, 2012 at 8:02 AM, Austin Einter
<austin.einter@gmail.com <mailto:austin.einter@gmail.com>> wrote:

    Dear All
    I have an auto complete text field , where user types and if
    corresponding  entry is present in database, I show it to
    user using below code.

    /*$matches = array();
      if ($string)
      {
          $result = db_select('resubmt_skill_ids')
            ->fields('skill_ids', array('name', 'id'))
            ->condition('name', db_like($string) . '%', 'LIKE')
            ->range(0, 10)
            ->execute();
          foreach ($result as $skill)
          {
              $matches[$skill->name] = check_plain($skill->name);
          }
      }
      drupal_json_output($matches);
    */
    Lets say one user wanted to type /*.net*/, as soon as user
    types /*.n*/ I get below error.

    /*
    An AJAX HTTP error occurred.
    HTTP Result Code: 403
    Debugging information follows.
    Path: http://localhost/example.com/util/known/skillsets
    StatusText: Forbidden
    ResponseText:
    403 Forbidden
    Forbidden
    You don't have permission to access /util/known/skillsets/.n
    on this server.
    Apache/2.2.14 (Ubuntu) Server at localhost Port 80
    */

    Can somebody help me why this error comes and how can I avoid it.

    Thanks
    Austin





    --
    [ Drupal support list | http://lists.drupal.org/ ]




-- 
Regards,
Vaibhav Jain

--
[ Drupal support list | http://lists.drupal.org/ ]