" Sorry, it seems like an intrusion attempt or your server doesn't support HTTP referrers! " error

One more problem on having updated the code of the forum:

When it is entered from a computer by operating system Mac it gives the following mistake

"Sorry, it seems like an intrusion attempt or your server doesn't support HTTP referrers!"

That can be?

This error is related to the miniBB protection algorithm which allows to post only from the original domain (to prevent hacking from external domains or servers). The code is located at the very top of index.php and is executed each time when you post something to forums.

I don't know what kind of Mac OS version are you using and what kind of browsers, but it is obvious that this browser doesn't support HTTP_REFERER variable.

You may check index.php for the code which begins with

/* Allowing to post only from the internal or allowed domain */

and ends with

/* --Allowing to post */

and comment or remove this code, but it will increase a potential risk of hacking your software.

Thank you very much for the response. Already he had thought to eliminate this part of the code, but he did not know if it was necessary or not.

Apparently it happens with the browsers Safari and FireFox.

A greeting Juan Carlos

I am using the latest version of FireFox and it works great.

If it wouldn't work, we probably would get attacked by the crowd of users :-) But it SHOULD work in every normal browser, HTTP_REFERER is a standard.

[moved]

Hi guys,

I'am testing a new board, and started getting this error "Sorry, it seems like an intrusion attempt or your server doesn't support HTTP referrers!" it is happening right after i try to log in. I have another forum but older version and it does not happen on that one.

I checked in google and there is also a forum running minibb and having the same problem this one:

https://www.bitblinder.com/forum/index.php?action=vthread&forum=2&topic=67]

mine is here:
http://www.gdebolit.com/forum]www.gdebolit.com/forum

but if I try to make a reply to a post and enter my login info there, then it works.

what can it be? :)

I was using IE, and Firefox latest version.

The problem may come from the comparison of $_SERVER['HTTP_REFERER'] with the $main_url you have specified in settings.

The most common mistake when setting up the forums (or any other domain) is to keep both 'www' and non-www versions of the same domain pointing to the same website.

If you have set up $main_url for miniBB having 'www' in it, then you might enter your domain without 'www' which is obviously a very different thing, but it will give you an impression you are entering the same site, at the time it is not.

You need to set up .htaccess to redirect from non-www to www-version, if 'www' is set up under $main_url. Or otherwise, if you would like to run the forums from www version, .htaccess must redirect from www to non-www.

As you might know, it's also useful for search engines - they all prefer to avoid duplicate content on different domains.

This is also related to cookies - www and non-www domains are very different things in terms of security.

So, for the forums, you must have only one domain set up. If you don't know what kind of code to put under .htaccess, just reply and I will try to find the proper piece on my HDD.

Thanks Paul, will give it a try.

It will be nice, if you or somebody else provide the code

Try this:

this is what i have in mine

RewriteEngine On
RewriteRule ^index\.html$ ./index.php?mdrw=on
RewriteRule ^manual\.html$ ./index.php?action=manual&mdrw=on
RewriteRule ^([0-9]+)_([0-9]+)_([-0-9]+)\.html$ ./index.php?action=vthread&forum=$1&topic=$2&page=$3&mdrw=on
RewriteRule ^([0-9]+)_([-0-9]+)\.html$ ./index.php?action=vtopic&forum=$1&page=$2&mdrw=on

Then try this instead: