Forbidden

Try reinstalling the bookmarks plugin.

I had this same error with "Bookmark This" and "Report This".  Dhrup really helped me on this one over at the Google Elgg group.

Okay, it's not a problem with Elgg, it's your web host.  Try reading this http://www.vbadvanced.com/forum/showthread.php?t=32801 and contact yout web host.  My host, Hostgator had to whitelist those urls in mod_security.

Be sure to read the information in the link above, it has excellent information about your issue.

-Crusader

hi crusader .. thanks a ton for your help ... i have contacted hostagor for the same and they are in the process of adding my domains to the whitelist...hopefully this should resolve the issue

cheers,

Varghese

Even if there is a workaround, any plugin that runs into problems with mod_security has a problem in my view.

I've put this problem in the bug tracker:

http://trac.elgg.org/extensions/ticket/184

thanks Kevin

ticket 184 may not fix the real culprit.

I believe HostGator (perhaps other ISPs too) may be 'customizing' mod_security to "protect" their hosted sites.

Clicking "BookMarkThis" triggers ==>

javascript:location.href='http://community.elgg.org/mod/bookmarks/add.php?address='+encodeURIComponent(location.href)+'&title='+encodeURIComponent(document.title)

The "encodeURIComponent(location.href)" passes the URL to be bookmarked -- contains the slash "/" -- I believe that this "/"is being considered as suspicious (rather than GET parms) by HostGator  /Mod_security and so they say "403 Forbidden" -- ie "you can't go to that dir/ "

Could try replacing all "/" in the "javascript:location.href='http://community.elgg.org/mod/bookmarks/add.php?..." GET parms to render the whole URL "harmless" to mod_security/ HostGator/etc --> but this means rewriting "bookmarks/add.php" code.

Hostgator's "whitelisting" does make "BookmarkThis" work for any sites hosted by them.

The "403" issue is *not unique with Elgg -- *other CMSs eg WordPRess have had the same "403" problem.

I forgot.. BookMark This does this --

http://community.elgg.org/mod/bookmarks/add.php?XXXXX

as soon as there is a slash "/" after the "?" ==> (hostgator says) "403"

if no slash "/" after "?" ==> ok

* The problem is b/c "GET" --mod_security is applying anti-CSRF rules to block b/c it looks like a forgery.

*If we used "POST to pass the to-be-bookmarked URL -- mod_security will allow the post request as considered safe.

hey guys,

just wanted to update you that Hostagtor has finally resolved the issue for my site. Thank you all for your help.

Cheers,

Varghese

@varghese. How did you resolve the issue? I contacted to my hostgator and they said that I need to change the .htaccess file and they can't help me in that.

So what should I do. My bookmark this tool is not working.