404 using bookmarklet on some sites

[Petar Benke]

Hello. I have shared hosting and I noticed that, when I click on bookmarklet on some sites, it drives me to a 404 page of my site. Example of such site is http://nyromodal.nyrodev.com/ . This is the URL of popup window

/sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal v2 %3A%3A jQuery Plugin&description=

That shows 404 page. If I remove one space just before that double semicolon

/sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal v2%3A%3A jQuery Plugin&description=

everything goes well. I tried with both latest release 0.98.5 and latest code from the Git - it is the same.

If you need more info about server, please let me know. Apreciate your effort.

[Christian Weiske]

I can't reproduce the problem here.

Could you check your web server error log and paste the error log line from there?

[Petar Benke]

I am sorry, this is not my own server, but I found this in access log:

xxx.xxx.xxx.xxx - - [29/Nov/2013:18:17:32 +0100] "GET /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal%20v2%20%3A%3A%20jQuery%20Plugin&description= HTTP/1.1" 404 7325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0"

[Christian Weiske]

Please post the access log line with the working URL (with the one space removed).

[Petar Benke]

Here it is:

xxx.xxx.xxx.xxx - - [29/Nov/2013:18:59:26 +0100] "GET /sc-new/www/bookmarks.php/petar?action=add&popup=1&address=http%3A%2F%2Fnyromodal.nyrodev.com%2F&title=nyroModal%20v2%3A%3A%20jQuery%20Plugin&description= HTTP/1.1" 302 20 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0"

[Christian Weiske]

What happens if you remove (or rename) the www/.htaccess file? Does the error still occur? Do you have .htaccess files in the parent directories (up to the root)?

[Petar Benke]

I have .htaccess file in /sc-new/www/ (in which I had to comment line "Options +FollowSymlinks"). I moved out this file and it didn't helped.

I have another .htaccess file in root of the server, it have two lines only

ErrorDocument 403 /index.php
ErrorDocument 404 /index.php

If I move this file, then I get proper Not found page which says

Not Found
The requested URL /sc-new/www/bookmarks.php/petar was not found on this server.

[Christian Weiske]

This is really strange.

Please modify .htaccess by adding a new line:

AcceptPathInfo On

Does it work then?
Which apache version is that? Which OS (and version)?

[Petar Benke]

No improvements.

PHP 5.4.17
Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0-fips mod_bwlimited/1.4 mod_fcgid/2.3.6
Linux 2.6.32-358.11.1.el6.x86_64

I contacted hosting company about this issue to see if they can help, waiting for response...

[Christian Weiske]

The only thing I can imagine now is that there is some intrusion detection / sql injection detection system running as apache module that sends out 404 when it finds something that looks like a sql injection attempt.

I'm afraid I can't help you here :/

[Isaac Thompson]

I just started getting the same errror. I think it started with a Firefox update. I found a way to fix it!
Use encodeURI insted of encodeURIComponent.

Like this:
javascript:x=document;a=encodeURI(x.location.href);t=encodeURIComponent(x.title);d=encodeURIComponent(window.getSelection());open('http://isaacthompson.com/bmarks/www/bookmarks.php/somedolphin?action=add&popup=1&address='+a+'&title='+t+'&description='+d,'SemanticScuttle','modal=1,status=0,scrollbars=1,toolbar=0,resizable=1,width=790,height=465,left='+(screen.width-790)/2+',top='+(screen.height-425)/2);void%200;

Thanks for Semantic Scuttle :)
Ike

[Christian Weiske]

I don't understand how this can help, since encodeURI actually encodes less characters than encodeURIComponent :/