Folks,

I just finished upgrading to CBSubs 1.2. I've installed all Joomla plugins, Modules and CB plugins from this package. After installing, I am receiving the following error message when I try to save a subscription plan:

403: Access Forbidden
Attempted SQL injection in POST

I am using 2 SQL Actions upon activation. Both are set as internal. They are as follows:

SQL Action #1:
UPDATE
`jos_cbsubs_subscriptions` a
SET
subscription_date = IF (DAYOFMONTH(subscription_date) >= 15, CONCAT(YEAR(CURDATE()),'-',DATE_FORMAT(DATE_ADD(CURDATE(), INTERVAL 1 MONTH),'%m'),'-','01'),
CONCAT(YEAR(CURDATE()),'-',DATE_FORMAT(CURDATE(),'%m'),'-','01'))
WHERE
a.`user_id` = [user_id]

SQL Action #2:
UPDATE
`jos_cbsubs_subscriptions` a
SET
expiry_date = DATE_ADD(a.`subscription_date`, INTERVAL 1 YEAR)
WHERE
a.`user_id` = [user_id]

The objective of these SQL statements are to set the subscription date to the 1st of either the current month or the 1st of the next month depending upon the current date.

I am not sure where to begin looking for this error. Any suggestions on how to resolve this issue?

Thanks,
Joe

Folks,

I found my problem. Sorry for the post. I am running RSFirewall and the Active Scanning was checking for SQL Injections on components. Once I configured it to "skip" com_profiler, my issue resolved itself. Again, sorry for the post!

Regards,
Joe

Dude, you saved me arse big time with this. My problem was with GroupJive. Everything worked fine but when I tried to Save the ABOUT PAGE description, I got the 403 error.

I turned off the SQL check and hopefully this might solve a few other funky errors as well.

Thanks so much for posting your simple solution.