Can't troubleshoot denied page

Questions and comments about currently under development PWB v3

Moderators: Tyler, Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Can't troubleshoot denied page

Post by Philip - Long Beach NY »

I'm having difficulty finding out why a secure page is being denied. Its a page that pops up when a patron is logged into their account. The domain is allowed in my URL file, but when I turn on DebugAccessString no pop up is displayed, telling me what exactly was denied. In IE, the window pops up fine and since its a pop up, I turned off IE's pop up blocker in case that was the culprit, but its still happening. The patron can enter their credentials and log in, but when they want to pay their fines, the PAY link won't pop open for them to enter their credit card info, excetera, even though I've copied the whole URL into the URL.txt file. What am I doing wrong?

Thanks,

Philip
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

PWB v2 and v3 share the same filters, you may be able to use PWB v2 to get the URL that is being denied.

We will look into the "DebugAccessString" issue.

--Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Scott, thanks. If you don't experience anything odd let me know and I'll submit my .ini file if you need it.

P
Complexity is the enemy of security
-- Steve Gibson

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Scott, Using PWBv2 doesn't block the page I need to come through. PWBv3 with our security lockdown tool disabled and in an Administrator account still blocks that page. I have all relevant URL's in my filter file so I'm at a loss.

Philip
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

We verified the DebugAccessString is working correctly.

You can also enable the history file with access logging.

[Security]
WriteHistoryFile=True
TrackURL=True
LogAccess=True

--Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Scott,

https://alisweb.org/iii/ecom/pay.do?sco ... e=7&tty=11

This is the URL that won't pop up: its a secure form for patrons to enter their credit card credentials. Even after adding it to my URL.txt file, PWB still won't open it. Any ideas?
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

Does it open if you turn off the filter?

--Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Scott wrote:Does it open if you turn off the filter?

--Scott
No it does not :cry:

I'm using 3.0.2 not the beta 3.0.22
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

When I go to the URL is is asking for a Library card number. Would it be possible to email a temporary Library card number to me in order for us to test with?

--Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Scott,
Of course. I will email you my credentials
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

What is the web site URL that pops up the window with this URL?

--Scott

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

Philip - Long Beach NY wrote:Scott,

https://alisweb.org/iii/ecom/pay.do?sco ... e=7&tty=11

This is the URL that won't pop up: its a secure form for patrons to enter their credit card credentials. Even after adding it to my URL.txt file, PWB still won't open it. Any ideas?
This one, that I posted earlier. After you log in, click on the fines link. Then click the PAY link to begin the process. The PAY link is the pop up window (that contains the corresponding URL) that is not opening.

Philip
Complexity is the enemy of security
-- Steve Gibson

User avatar
Philip - Long Beach NY
Benefactor
Benefactor
Posts: 82
Joined: Fri Feb 28, 2003 2:30 pm

Post by Philip - Long Beach NY »

I hope the pop up isn't working because of the CEF3 limitation that you alluded to here?

http://www.teamsoftwaresolutions.com/ph ... php?t=1455

P
Complexity is the enemy of security
-- Steve Gibson

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

Considering we have not added anything with CEF to any of the public releases I am pretty sure CEF is not the issue.

--Scott

Scott
Site Admin
Site Admin
Posts: 2528
Joined: Mon Dec 16, 2002 12:31 pm
Location: Rochester, MN
Contact:

Post by Scott »

Philip - Long Beach NY wrote:
Philip - Long Beach NY wrote:Scott,

https://alisweb.org/iii/ecom/pay.do?sco ... e=7&tty=11

This is the URL that won't pop up: its a secure form for patrons to enter their credit card credentials. Even after adding it to my URL.txt file, PWB still won't open it. Any ideas?
This one, that I posted earlier. After you log in, click on the fines link. Then click the PAY link to begin the process. The PAY link is the pop up window (that contains the corresponding URL) that is not opening.

Philip
I do not see a "Fines" link, all I see is a page with 2 check boxes at the top asking for address and credit card information.

--Scott

Post Reply