Email Override Issues

6 months 2 weeks ago - 6 months 2 weeks ago #371557 by gpraceman
Email Override Issues was created by gpraceman
-- HikaShop version -- : 6.4.0
-- Joomla version -- : 6.1.0
-- PHP version -- : 8.4
-- Browser(s) name and version -- : Firefox 149.0.2
-- Error-message(debug-mod must be tuned on) -- : Forbidden You don't have permission to access this resource.

In reviewing my email overrides, I have run into two issues.
  1. I am unable to save changes to any of them or even click on the Cancel button without getting a "You don't have permission to access this resource." error. I checked file and folder permissions and those look proper. I have to download the files via FTP, edit them and upload to get around this issue.
  2. When trying to "See Modifications", while using the dark theme, the text is unreadable. The dark theme is not being applied. I have to switch to light theme so see them.

I also notice the theme issue when viewing an email in the Email Log.
Last edit: 6 months 2 weeks ago by gpraceman.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371560 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

It's likely an issue with a security mechanism on your server which blocks the request.

Knowing your recent issues with payment methods ( www.hikashop.com/forum/install-update/91...im-error.html#371558 ) checking email overrides is indeed a good idea.
I would even recommend to try to disable all the email overrides (rename the "modified" files) and see if the payment methods work.

Regarding the See modifications popup display in dark mode, that's something we fixed in HikaShop 6.4.1, which we just released yesterday. It displays like this now: i.imgur.com/oSfJVLw.png

Regarding the email history, I'm not able to reproduce the issue:
i.imgur.com/0SqZBQM.png
You might have a problem with the email generation, which would go back to what I was saying above with email overrides.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371565 by gpraceman
Replied by gpraceman on topic Email Override Issues

nicolas wrote: It's likely an issue with a security mechanism on your server which blocks the request.

I turned off RSFirewall and still get that forbidden error.

nicolas wrote: Regarding the See modifications popup display in dark mode, that's something we fixed in HikaShop 6.4.1, which we just released yesterday. It displays like this now: i.imgur.com/oSfJVLw.png

Regarding the email history, I'm not able to reproduce the issue:
i.imgur.com/0SqZBQM.png

I installed 6.4.1 and still have these theming issues.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371572 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

Turning off RSFirewall doesn't necessarily mean that you turned off all the plugins (especially the system plugins) associated with it which can still handle the security on your website. I would recommend trying again turning off both the component AND its system plugins.

Regarding the theming issues, it could be a CSS override issue. Do you have the "Back-end CSS File" setting set to "default" in the HikaShop configuration ? If not, try to change it to default and see if that helps.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371576 by gpraceman
Replied by gpraceman on topic Email Override Issues
I turned off RSFirewall's active scanner and disabled all of its plugins. Still I get the Forbidden error.

Changing to the default backend CSS fixed the theming issue with the Emails "See Modifications". However, I still see the issue with the email log page.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371578 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

I'm out of ideas for both remaining issues.
Could you provide a backend access via our contact form in order to check on the situation ?
www.hikashop.com/support/contact-us.html

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago - 6 months 2 weeks ago #371589 by gpraceman
Replied by gpraceman on topic Email Override Issues
I found these examples in the error log file for my IP address. Clicking on the Save button is one issue. I am surprised about getting Forbidden error just clicking on the Cancel button. I would think that would just be a simple forward back to the Emails page.
Code:
[Fri Apr 17 14:27:09.897114 2026] [:error] [pid 2121134:tid 140379192526592] [client ***:63232] [client ***] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{1,100}?php.{1,100}?(?:passthru|serialize|system|eval|create_function|create_function|preg_\\\\w+|exec|shell_exec ?(?:\\\\(|\\\\: ?'?))|select.{1,100}?(?:php|perl).{1,100}?into outfile|reg_replace ?\\\\()" at ARGS:data[mail][preload]. [file "/etc/httpd/modsecurity.d/modsec/10_asl_rules.conf"] [line "279"] [id "380025"] [rev "7"] [msg "Atomicorp.com WAF Rules: SQL injection with PHP/PERL payload"] [data "reg_replace("] [severity "CRITICAL"] [tag "SQLi"] [tag "RCE"] [hostname "***.com"] [uri "/administrator/index.php"] [unique_id "***"], referer: https://***/administrator/index.php?option=com_hikashop&ctrl=email&task=edit&mail_name=payment_notification [Sun Apr 19 21:39:53.032960 2026] [:error] [pid 3353928:tid 140379167348480] [client ***:18442] [client ***] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.{1,100}?php.{1,100}?(?:passthru|serialize|system|eval|create_function|create_function|preg_\\\\w+|exec|shell_exec ?(?:\\\\(|\\\\: ?'?))|select.{1,100}?(?:php|perl).{1,100}?into outfile|reg_replace ?\\\\()" at ARGS:data[mail][preload]. [file "/etc/httpd/modsecurity.d/modsec/10_asl_rules.conf"] [line "279"] [id "380025"] [rev "7"] [msg "Atomicorp.com WAF Rules: SQL injection with PHP/PERL payload"] [data "reg_replace("] [severity "CRITICAL"] [tag "SQLi"] [tag "RCE"] [hostname "***.com"] [uri "/administrator/index.php"] [unique_id "***"], referer: https://***/administrator/index.php?option=com_hikashop&ctrl=email&task=edit&mail_name=order_admin_notification

I'm not worried about the email log theming issue. I rarely look at that page.
Last edit: 6 months 2 weeks ago by gpraceman.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371593 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

So it is indeed a security mechanism, as I was suspecting, but it comes from mod_security setup on your server, not RSFirewall.
You should whitelist your IP address in mod_security:
www.plesk.com/kb/support/how-to-whitelis...odsecurity-in-plesk/

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371599 by gpraceman
Replied by gpraceman on topic Email Override Issues
I was able to get our webhost to whitelist us. So, I can now use that functionality without error.
The following user(s) said Thank You: nicolas

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago - 6 months 2 weeks ago #371614 by gpraceman
Replied by gpraceman on topic Email Override Issues
If you want to track down that theming issue with the email log, attached are some examples. It affects some emails and not others and then only if using Dark theme. They all look fine in Light theme.
Last edit: 6 months 2 weeks ago by gpraceman.

Please Log in or Create an account to join the conversation.

6 months 2 weeks ago #371616 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

Since I'm not able to reproduce the issue on my end, I would need a backend and a FTP access on your website in order to look into this.
Could you provide these via our contact form ?
www.hikashop.com/support/contact-us.html

Please Log in or Create an account to join the conversation.

6 months 1 week ago #371656 by gpraceman
Replied by gpraceman on topic Email Override Issues
Thanks for figuring out that it is a email template issue. Is there a default for that other than None?

Please Log in or Create an account to join the conversation.

6 months 1 week ago #371657 by nicolas
Replied by nicolas on topic Email Override Issues
Hi,

Well, the default one is "default", not "None". So yes. That also means that if you have it to "None", it means that you must have changed it to "None" at some point in the past for some reason.

Please Log in or Create an account to join the conversation.

6 months 1 week ago #371660 by gpraceman
Replied by gpraceman on topic Email Override Issues
Must have been quite some time ago, if that is the case. Got it ironed out now. Thanks.

Please Log in or Create an account to join the conversation.

Time to create page: 0.158 seconds
Powered by Kunena Forum