Operations "Sorting columns" and "CSV Export" in search results leads to 403 Error

[AfADaDa1]

Config:
*********
You are using DaDaBIK version 7.1 ENTERPRISE, installed on 12-18-2015, the last version of DaDaBIK is 7.3.3 released on 07-26-2016

You are not running the last release of DaDaBIK, the release you are running might have bugs and security holes, see the official change log for further information. You can upgrade DaDaBIK here.

PHP Version: 5.4.45-0+deb7u5

mysql version: 5.5.52-0+deb7u1

Web server: Apache

Client: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
*********

Hi

If we try to sort the columns in a search result this leads to the 403 Error (Forbidden. You do not have permission to access this document.). Sorting the tables without search filters works fine.

The same error (403) results if we try to do CSV-Exports from search results. In that case also, the export from the "not search filtered" tables works fine.

Do you have an idea how to solve this problems?
Thanks!

 

[eugenio]

Hello,
it's sounds like a firewall is misunderstanding the URL and blocking it because it thinks it is dangerous.

With DaDaBIK 7.3 we fixed this issue, which seems to be very similar (I am pasting from the changelog):

"Sometimes the DaDaBIK execution was blocked by the ModSecurity Web application firewall because of the word "table_name" in URLs, producing a "Forbidden" error message. Fixed."

I would try the same application in your local machine, if it is possible, to see if the problem is the firewall of your hosting provider.

 

[AfADaDa1]

Hi Eugenio,
great! We upgraded to DaDaBIK 7.3 and contacted our hosting provider. Sorting in and export from search results works now!

 

[eugenio]

I'am glad it works!