Facebook gives 403 error for my website - Updated Information - facebook

I have a website where i added facebook og tags. http://bowarrow.de No matter what i try and what i change i always get a 403 Error in the debugger.
Though it can access my site somehow. I read every question about this and in the last question i asked about it, no one could really help me. So i decided i ask on facebook and could find the following:
In this case, your site is definitely returning a 403 error to at
least some of the requests from the debugger. This is something
happening in your code or hosting infrastructure
$curl -A "facebookexternalhit/1.1" -i 'http://bowarror.de/' HTTP/1.1
403 Forbidden Date: Mon, 03 Jun 2013 16:03:55 GMT Server: Apache
Content-Length: 2940 Content-Type: text/html
Host Europe GmbH – bowarrow.de [...]
I tried it myself and can confirm that i can't get any access with that facebook header. I asked hostgator several times if there is a server problem on their site and they denied. So maybe i think it might have something to do with host europe, where my domain is registered?
I linked the domain to my hosting through a-records because host europe doesn't support nameserver changes.
Any ideas, help?

Okay i've found probably what caused it. The reason for this was that i use my domain from hosteurope with hostgator. Because hosteurope doesn't allow nameserver changes i had to change the a-records.
Unfortunally there were some AAAA records IPv6 that i didn't change, because hostgator doesn't support ipv6 in my hosting.
Facebook was crawling these ipv6 and sent a 403 to the debugger. (Because there was no ipv6 server that it could have access to)
Yesterday i deleted them and it nearly immediately startet working. See here: https://developers.facebook.com/tools/debug/og/object?q=http%3A%2F%2Fwww.bowarrow.de%2F
Unfortunally it only works for the URL with www. without it i still get a 403.
see here: https://developers.facebook.com/tools/debug/og/object?q=http%3A%2F%2Fbowarrow.de%2F

For anyone using the 10Web Social Post Feed WordPress plugin, follow these steps:
Go to Facebook Feed WD > Options page and press Uninstall.
Uninstall the plugin by following the steps in this video.
Navigate to Plugins page and delete Facebook Feed WD
Reinstall and activate it.
Re-Authenticate your facebook account and recreate your feeds.

Related

The page isn’t redirecting properly Openshift

I have an open shift account and I created an application a little while ago for which I didn't add a domain. Now i am trying to add the domain its not working correctly.
The domain is www.quantumfreedom.com. There is a CNAME in place for both www and * pointing to the application on openshift. I have submitted a ticket on GoDaddy and with my other domain provider and they both say it's a hosting issue and not a domain or DNS issue.
The full message reads as follows:
The page isn’t redirecting properly
Firefox has detected that the server is redirecting the request for
this address in a way that will never complete.
This problem can sometimes be caused by disabling or refusing to accept
cookies.
This is not the only domain I have an issue with before with open shift.
Current CNAME record for www.quantumfreedom.com looks like this:
;QUESTION
www.quantumfreedom.com. IN CNAME
;ANSWER
www.quantumfreedom.com. 3548 IN CNAME vitscript-james1vince.rhcloud.com.
If http://vitscript-james1vince.rhcloud.com is the site you want to show to the users who type http://www.quantumfreedom.com in their address bar, then as far as DNS is concerned, there is nothing more you can or should do, users will be directed to the correct IP address.
Now you need to make sure that once the request for www.quantumfreedom.com arrives at your http server, the server responds with correct content. At the moment that is not the case, if you try from command line:
curl -v http://www.quantumfreedom.com/
Notice these two lines in response:
< HTTP/1.1 301 Moved Permanently
< Location: http://www.quantumfreedom.com/
This means that webserver is redirecting the client back to the same url, causing an infinite loop, resulting in browser error:
ERR_TOO_MANY_REDIRECTS
(or similar, depending on the browser)
This redirect can com from either webserver settings (Apache .conf or .htaccess files) or even application itself, so those would be the places to look next.

Facebook scraper doesn't work after disabling SSLv3 (sslv3 alert handshake failure)

I disabled SSLv3 on my server to protect users from the POODLE vulnerability, but since doing so Facebook's scraper no longer works on my sites (so sharing pages on facebook doesn't result in a share image, title, or description being pulled in).
When I try using the debug tool with a URL, it shows this error:
Curl Error : SSL_CONNECT_ERROR error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
I have been Googling and searching on here, but haven't been able to find much information on this.
Do I have to keep SSLv3 enabled in order to share pages on Facebook?
I ran your domain through several SSL checkers, and weirdly sslcheck.globalsign.com complains that you had neither TLS v1.0, TLS v1.1 nor TLS v1.2 enabled.
Since other checkers are not reporting this (and Chrome says TLS v1.2 is used as well when I visit the site), one might suspect it to be an error of this particular tool – but since you’re having trouble with the FB scraper as well, it might indicate that there is something wrong with your configuration.

Redirect HTTPS to HTTP With SSL Certificate Already Removed from CPanel

I want to ask something. I have an online store. My online store uses SSL for the entire website. I also get backlinks with https:// link. Now I do not use SSL again and wish every time people click on the link https will go to http. I've removed the SSL certificate from my CPanel. I've tried several .htaccess and php code, but none of which succeeded. Please help me, thank you. Here's some code I tried:
.htaccess HTTPS to HTTP code: http://pastebin.com/uDuB1S5K
PHP HTTPS to HTTP code: http://pastebin.com/UsDQnB8v
That became my problem is .htaccess and PHP code above always detect website's SSL, I want the code to detect whether the page is opened using the url http or https, not using SSL/not.
Note: The redirect is 301.
Thank you very much for your help.
Regards, Darnin.

Facebook scraper uses incorrect DNS data > my site is not gettng scraped

I recently moved one of my sites (gezondbenjij.nl) to a new hosting account. This resulted in a new IP address.
Unfortunately, since the move, the Facebook scraper cannot find my site on the new IP address. It still uses the old IP. All DNS settings are correct, and every browser/client/tool finds the correct site at 178.22.57.204 (gezondbenjij.nl). Except for Facebook.. The facebook scraper lands in my old hosting account. So I guess their hostfile or DNS cache still holds the old data. Even after a couple of weeks.
I have set a domain alias at gezondbenjij.com --> gezondbenjij.nl, and redirected the old hosting account to this .com domain. In this way, facebook is redirected to the correct site via a bypass, but still is not able to scrape the site. So the URLs I try to share on facebook will not generate snippets at this moment.
Is there any way to force (or kindly ask) Facebook to update their DNS cache? I used the fb URL linter, but it will not solve the issue. It will only reset facebook's html cache, not the DNS cache..
Check your IPv4 and IPv6 IP addresses in your DNS configuration. I had similar issue and the problem was that I've updated only IPv4 DNS record, while keeping old IPv6 (Facebook uses IPv6 in it's Tools). My hosting provider corrected it and problem was solved.

Need to set up SSL for facebook site apps to work, any suggestions? I do not need to protect passwords or anything

facebook is forcing apps to use HTTPS, i have been looking in to openSSL, but i really cannot get my head around on how to install it, i am using godaddy and it runs on a linux server, i dont think i can execute from any command line.
I need to have a valid HTTPS link, a self signed certificate it OK, but i cannot seem to get one up on GoDaddy, can i redirect all HTTPS to HTTP, would that work? via .htacess
Any suggestions are welcome!
I had the exact same problem Yesterday, and quickly found a way around this without having to move my application to a server with SSL.
Facebook only validates the starting URL to be https://..... however, you are not forced to use ssl from there on forward. Thus I simply created a free Heroku account (you can use any other hosting provider that supports SSL) and added a index.php file with the following code:
<?php
header( 'Location: http://my.app.url' );
When the IFrame is loaded, it will automatically redirect to your application hosted on a non-ssl server and will work without any problems.
For more information you can check out my blog post http://www.xethron.co.za/building-a-facebook-app-on-a-host-without-https-ssl-support