Error 403 after registration in checkout page

-- HikaShop version -- : 2.3.2 Business edition
-- Joomla version -- : 3.3.3
-- PHP version -- : 5.3.29
-- Browser(s) name and version -- : Chrome
-- Error-message(debug-mod must be tuned on) -- : n/a

Hi,

When I checkout and choose for Registration then after filling out the form and klick the registration button I get a 403 error - Access Forbidden. (link is <domain>/shop/nl/maaiers/checkout/step/step-1)

Because I am still configuring Hikashop and just updated from Essential to Business version,
In fact this is the first time I try to register in the checkout phase so I do not know if this problem is related to the Hikashop version.

Any help is appriciated.

Regards, Benny

Hi,

Is the link a valid link ?

I think that you have an issue related to this topic:
hikashop.com/forum/checkout/870874-forbi...g-emails.html#170410

It seems to be coming from your mod_security apache module which is to aggressive.

Hi Xavier,

The workaround in .htaccess did not work so I asked my hosting provider if they could change the mod_security setting.
I'll keep you updated.

The hostingprovider told me mod_security was not applicable for this site/domain.
They checked the log and their conclusion is that it is a security thing within Joomla/Hikashop

Here is the log;

x.x.183.119 - - [16/Sep/2014:16:07:22 +0200] "POST /shop/nl/maaiers/klepelmaaier/checkout/step/step-1 HTTP/1.1" 403 1262 " www.xxxx.nl/shop/nl/maaiers/klepelmaaier/checkout " "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36"
x.x.183.119 - - [16/Sep/2014:16:07:23 +0200] "GET /shop/templates/system/css/error.css HTTP/1.1" 304 202 " www.xxxx.nl/shop/nl/maaiers/klepelmaaier/checkout/step/step-1 " "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.120 Safari/537.36"

If you like, I would be glad to give you the link to the site in a PM, so you could check it yourself. It is also possible to give you access to the backend.

HikaShop has no security thing which would produce such error.
It usually comes from mod_security.
Yes, please provide a backend access to your website via our contact form with a link to this thread:
www.hikashop.com/support/contact-us.html

Thanks! backend access has been sent via the contact-form.

The backend access you provided didn't work. Could you double check it please ?

Hi Nicolas,

Backend account has been reset and checked and has just been sent again. Should be okay now.

Regards,

Benny.

Hi,

It's working yes.
I checked HikaShop, the settings of Joomla and HikaShop on your website but couldn't find any clue. As far as I can see it doesn't come from HikaShop at all.
We would need a FTP access in order to analyze the code to tell you where it's coming from. Could you provide that as well ?

Hi,

Just sent the credentials via your contact form.

Regards, Benny

Hi,

Because of the security issue with version 2.3.2 I just upgraded Hikashop Business to v 2.3.3.

Unfortunately this upgrade did not solve the problem with the 403 error after registration in checkout page.

Regards, Benny.

Hi,

HikaShop 2.3.3 is HikaShop 2.3.2 with the security patch.
The next (full) release which should be HikaShop 2.3.3 will become HikaShop 2.3.4

Nicolas is still assigned on your problem and is still investigating on it.
When he will find the solution, he will answer you.

Regards,

Herewith i would like to inform you that I did an upgrade to Joomla 3.3.5 (security patch)
As expected; still the 403 error.

Just to keep you updated; I upgraded Joomla today to 3.3.6

Hi,

I just found out what the problem is.

It looks like the registration form in the Hikashop Checkout is connected to Joomla registration. Because we do not want users to registrate in Joomla I disabled the registration possibility in Joomla user management. Because of this Hikashop registration form gives the 403 error.

We use Joomla login to give partners access to our products with reduced prices but we do supply them with the login credentials. For this reason Joomla registration is disabled. If this means that Hikashop registration for users of the webshop is not possible, the registration option in Hikashop is not usable for us.

Regards,

Benny.

The admin and ftp account I provided via the contact form have been suspended.

Hi,

bp54 wrote: We use Joomla login to give partners access to our products with reduced prices but we do supply them with the login credentials. For this reason Joomla registration is disabled. If this means that Hikashop registration for users of the webshop is not possible, the registration option in Hikashop is not usable for us.

The registration in HikaShop create a Joomla account, both are linked.
If you don't want registration so you have to use the Guest Checkout.

Regards,

i'm getting a 403 error on the registration light box on the checkout page, joomla registration is turned ON, but i can't seem to go past the registration page...

can anyone help me with this issue?

i'm running joomla 3.3.6 and the latest version of hikashop for business.

cheers,
dan

this is the error i'm getting on joomla error console:

Joomla! Debug Console

Errors
Access forbidden
Call stack
# Function Location
1 JApplicationCms->execute() JROOT/index.php:40
2 JApplicationSite->doExecute() JROOT/libraries/cms/application/cms.php:251
3 JApplicationSite->dispatch() JROOT/libraries/cms/application/site.php:237
4 JComponentHelper::renderComponent() JROOT/libraries/cms/application/site.php:191
5 JComponentHelper::executeComponent() JROOT/libraries/cms/component/helper.php:332
6 require_once() JROOT/libraries/cms/component/helper.php:352
7 hikashopController->execute() JROOT/components/com_hikashop/hikashop.php:77
8 JError::raiseError() JROOT/administrator/components/com_hikashop/helpers/helper.php:1459
9 JError::raise() JROOT/libraries/legacy/error/error.php:253
Session
Profile Information
Memory Usage
Database Queries

Hi,

HikaShop has no lightbox for the registration form on the checkout. So I'm not sure what you're talking about.
Please provide a link to the shop so that we can look at the issue.

i just PM you with url and login details...

cheers,
dan