404 using bookmarklet on some sites

Help
2013-11-27
2014-03-26
  • Petar Benke

    Petar Benke - 2013-11-27

    Hello. I have shared hosting and I noticed that, when I click on bookmarklet on some sites, it drives me to a 404 page of my site. Example of such site is http://nyromodal.nyrodev.com/ . This is the URL of popup window

    /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal v2 %3A%3A jQuery Plugin&description=

    That shows 404 page. If I remove one space just before that double semicolon

    /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal v2%3A%3A jQuery Plugin&description=

    everything goes well. I tried with both latest release 0.98.5 and latest code from the Git - it is the same.

    If you need more info about server, please let me know. Apreciate your effort.

     
  • Christian Weiske

    I can't reproduce the problem here.

    Could you check your web server error log and paste the error log line from there?

     
  • Petar Benke

    Petar Benke - 2013-11-29

    I am sorry, this is not my own server, but I found this in access log:

    xxx.xxx.xxx.xxx - - [29/Nov/2013:18:17:32 +0100] "GET /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal%20v2%20%3A%3A%20jQuery%20Plugin&description= HTTP/1.1" 404 7325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0"

     
  • Christian Weiske

    Please post the access log line with the working URL (with the one space removed).

     
  • Petar Benke

    Petar Benke - 2013-11-29

    Here it is:

    xxx.xxx.xxx.xxx - - [29/Nov/2013:18:59:26 +0100] "GET /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal%20v2%3A%3A%20jQuery%20Plugin&description= HTTP/1.1" 302 20 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0"

     
  • Christian Weiske

    What happens if you remove (or rename) the www/.htaccess file? Does the error still occur? Do you have .htaccess files in the parent directories (up to the root)?

     
  • Petar Benke

    Petar Benke - 2013-11-29

    I have .htaccess file in /sc-new/www/ (in which I had to comment line "Options +FollowSymlinks"). I moved out this file and it didn't helped.

    I have another .htaccess file in root of the server, it have two lines only

    ErrorDocument 403 /index.php
    ErrorDocument 404 /index.php

    If I move this file, then I get proper Not found page which says

    Not Found
    The requested URL /sc-new/www/bookmarks.php/petar was not found on this server.

     
  • Christian Weiske

    This is really strange.

    Please modify .htaccess by adding a new line:

    AcceptPathInfo On

    Does it work then?
    Which apache version is that? Which OS (and version)?

     
  • Petar Benke

    Petar Benke - 2013-11-30

    No improvements.

    PHP 5.4.17
    Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0-fips mod_bwlimited/1.4 mod_fcgid/2.3.6
    Linux 2.6.32-358.11.1.el6.x86_64

    I contacted hosting company about this issue to see if they can help, waiting for response...

     
  • Christian Weiske

    The only thing I can imagine now is that there is some intrusion detection / sql injection detection system running as apache module that sends out 404 when it finds something that looks like a sql injection attempt.

    I'm afraid I can't help you here :/

     
    • Isaac Thompson

      Isaac Thompson - 2014-01-11

      I just started getting the same errror. I think it started with a Firefox update. I found a way to fix it!
      Use encodeURI insted of encodeURIComponent.

      Like this:
      javascript:x=document;a=encodeURI(x.location.href);t=encodeURIComponent(x.title);d=encodeURIComponent(window.getSelection());open('http://isaacthompson.com/bmarks/www/bookmarks.php/somedolphin?action=add&popup=1&address='+a+'&title='+t+'&description='+d,'SemanticScuttle','modal=1,status=0,scrollbars=1,toolbar=0,resizable=1,width=790,height=465,left='+(screen.width-790)/2+',top='+(screen.height-425)/2);void%200;

      Thanks for Semantic Scuttle :)
      Ike

       
      • Christian Weiske

        I don't understand how this can help, since encodeURI actually encodes less characters than encodeURIComponent :/

         

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks