403 Forbidden Error during Installation

[CapCanuck]

Hi all,

I'm trying to complete a fresh installation of 1.3.8a for a friend and keep getting a 403 forbidden error after saving the phpBB Setup screen. phpBB is not currently installed on the server nor is it planned to be. As a result, I've left the settings as follows:

Do you want to use phpBB forums
Choose whether you want to use the phpBB forum or not. more info... No

phpBB Directory
The directory where phpBB is installed more info... Blank

Regardless of what I set, I receive the following error:

Forbidden

You don't have permission to access /zencart/zc_install/index.php on this server.

I've tried re-ftp'ing the installation to the server in case specific files were corrupted. I've also tried renaming or editing the .htaccess file to no avail.

Has anyone else had this same problem?

[DrByte]

Does your server errorlog tell you anything about the "why" behind the 403-Forbidden error? Usually it'll explain the reason.

[CapCanuck]

The error log give me the following info:

Access denied with code 403 (phase 2). Pattern match "(?:ogg|gopher|zlib|(?:ht|f)tps?)\\:/" at ARGS:zcinst[virtual_http_path]. [hostname "domain.com"] [uri "/zencart/zc_install/index.php"] [unique_id "HpPtBwoHH1oAAAPNQ9EAAAAD"] [Mon Aug 18 21:00:13 2008] [error] [client 64.180.191.162] ModSecurity: [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "906"] [id "340162"] [rev "58"] [msg "Remote File Injection attempt in ARGS (AE)"] [severity "CRITICAL"]

Any idea why this might be coming up?

Thanks

[DrByte]

That's the server's mod_security complaining about the data being passed.
Your /zc_install/.htaccess file includes some directives that can be used to override mod_security ... but it only works IF your server's configuration allows you to override it.

[CapCanuck]

Dang, I had a feeling that was the case.

I've been trying to set this up for a friend, and really don't have much control over the server settings.

Thanks for the help.

Cheers.