Client Denied by Server Configuration

[fortun3]

While trying to perform some security updates to /home/fortunec/public_html/catalog, the following web addresses are no longer working and shows up blank: http://fortunecookieking.com/catalog and http://fortunecookieking.com/catalog/admin.

When I check the error log, it says:

[Thu Dec 17 13:08:01 2009] [error] [client 71.92.72.234] client denied by server configuration: /home/fortunec/public_html/catalog/admin/index.php

I have checked the file and its CHMOD is 755. I don't understand why it's not working anymore. Is it because of the .htaccess files?

Don't know if my debug log would help either, but I got the following message below:
[17-Dec-2009 07:55:11] PHP Warning: file_get_contents(http://97.74.217.181/links.php) [<a href='function.file-get-contents'>function.file-get-contents</a>]: failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden
in /home/fortunec/public_html/catalog/includes/languages/english/html_includes/define_main_page.php(1) : eval()'d code on line 1


Please help! My store is currently not working now because of this. If I knew something like this was going to happen, I would not have touched a thing!

Or if there is some way to just reinstall ZenCart while keeping the template and other important things (such as the customer accounts and orders) that would be helpful as well. I need this fixed ASAP.

Thanks to anyone in advance that can help point me in the right direction.

[Kim]

Please help! My store is currently not working now because of this. If I knew something like this was going to happen, I would not have touched a thing!

Exactly what did you touch?

[fortun3]

Long story short, I was notified by my admin:
The following Zen Cart installation appears to be out-dated and vulnerable to exploit:

/home/fortunec/public_html/catalog

I found several news hacks here:

/home/fortunec/public_html/catalog/images

I have disabled the malicious content and changed the permissions of the /images directory from 777 to 755. This software will need to be updated as soon as possible.


So I looked around the Zen Cart website and I don't know if my errors are related to this, but I've tried to follow everything and anything that was related to increasing security on your Zen Cart, how not to exploit vulnerabilities in the program, etc.

I've tried back-tracking (reversing what I did), but my store just doesn't show up period. I honestly don't know what to do now, nor did I know what went wrong.

[Website Rob]

[Thu Dec 17 13:08:01 2009] [error] [client 71.92.72.234] client denied by server configuration: /home/fortunec/public_html/catalog/admin/index.php

That error msg. is specific to blocking IP 71.92.72.234. Your site works just fine for me.

If you still cannot view your site then you should look at "public_html/.htaccess" to see/remove any IP being blocked.

[fourbit]

I too can see your site just fine. If you don't see anything wrong in the .htaccess file, then your Host's server may have temporarily blocked your IP for a security issue. Possibly too many failed login attempts or the like. A message to them would be in order. ;)

Paul

[fortun3]

Sorry about that you guys. I was under a lot of pressure to get this fixed yesterday and I panicked so I couldn't really think clearly.

It wasn't until I got home (and I could think more clearly) that I figured out that it was the stupid .htaccess file that I (for some reason) had placed under public_html and was not realizing that it was set to block ALL IPS.

If you guys are able to view the store, it's because I have already removed that .htaccess file from public_html yesterday. I just haven't had a chance to get back to the forum until now.

But yeah Rob was correct, it was the public_html/.htaccess file that was the culprit. Thanks for all of your replies you guys. This was my first time working with .htaccess files and I think that I better understand how they work now = )