<p>I've run into an odd issue and I can't seem to figure out what is going on.</p>

<p><strong>Normal Process:</strong></p>

<ol>
<li>I click the Share arrow on a disabled entry.</li>
<li>I copy the tokenized link and send it out.</li>
<li>Folks without accounts are able to preview the page.</li>
</ol>

<p><strong>What is happening now:</strong></p>

<ol>
<li>I click the Share arrow on a disabled entry.</li>
<li>I copy the tokenized link and send it out.</li>
<li>Folks without accounts are given a 'Forbidden' warning. If I refresh my preview page, I also get the same warning.</li>
</ol>

<p><em>NOTES: There is no authentication required to access the template itself.</em></p>

<p>I checked the latest updates to Craft but did not see anything obvious that might affect that. I double-checked that the token time extension that we added in general.php and it's still set to a week.</p>

<p>Any ideas?</p>

<p><a href="https://i.sstatic.net/G97DM.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/G97DM.png" alt="enter image description here"></a></p>

CC BY-SA 3.0
2017-10-30T20:12:47.307Z
Can you post a screenshot of the Forbidden warning?  It sounds like it's coming from the web server instead of Craft.
Brad Bell
CC BY-SA 3.0
2017-10-30T20:13:23.913Z
Also, does the template you're trying to share have any sort of authentication logic in it?
Brad Bell
CC BY-SA 3.0
2017-10-31T11:18:26.817Z
@BradBell Updated, and no. It's just an article posting.
craftyguestsjt
CC BY-SA 3.0
2017-10-31T17:18:57.807Z
Hrm... is mod_security or Suhosin installed on that server?
Brad Bell
CC BY-SA 3.0
2017-10-31T18:37:01.097Z
@BradBell Nope.
craftyguestsjt
CC BY-SA 3.0
2017-10-31T20:50:33.087Z
Is `/en/index.php` the same entry point that Craft uses to load normal requests?  i.e. the rest of the site and the Control Panel loads fine?
Brad Bell
CC BY-SA 3.0
2017-11-01T17:13:04.573Z
@BradBell Yup! We can access the rest of the site and control panel items just fine. We only seem to encounter this error when we try to share a disabled entry.
craftyguestsjt
CC BY-SA 3.0
2017-11-01T18:51:26.780Z
I'm officially out of ideas. ¯\_(ツ)_/¯ I can't imagine how a non-Craft authenticated request would cause an Apache 403 forbidden response.
Brad Bell
<entry>
Share: Getting 'Forbidden' message when sharing externally
# Share: Getting 'Forbidden' message when sharing externally

(Asked by: username_0 on 2017-10-30)

I've run into an odd issue and I can't seem to figure out what is going on.

**Normal Process:**

1. I click the Share arrow on a disabled entry.
2. I copy the tokenized link and send it out.
3. Folks without accounts are able to preview the page.

**What is happening now:**

1. I click the Share arrow on a disabled entry.
2. I copy the tokenized link and send it out.
3. Folks without accounts are given a 'Forbidden' warning. If I refresh my preview page, I also get the same warning.

*NOTES: There is no authentication required to access the template itself.*

I checked the latest updates to Craft but did not see anything obvious that might affect that. I double-checked that the token time extension that we added in general.php and it's still set to a week.

Any ideas?

[![enter image description here](https://i.sstatic.net/G97DM.png)](https://i.sstatic.net/G97DM.png)

**Tags:** entry

> **Comments:**
> **username_1**: Can you post a screenshot of the Forbidden warning?  It sounds like it's coming from the web server instead of Craft.  
> **username_1**: Also, does the template you're trying to share have any sort of authentication logic in it?  
> **username_0**: @BradBell Updated, and no. It's just an article posting.  
> **username_1**: Hrm... is mod_security or Suhosin installed on that server?  
> **username_0**: @BradBell Nope.  
> **username_1**: Is `/en/index.php` the same entry point that Craft uses to load normal requests?  i.e. the rest of the site and the Control Panel loads fine?  
> **username_0**: @BradBell Yup! We can access the rest of the site and control panel items just fine. We only seem to encounter this error when we try to share a disabled entry.  
> **username_1**: I'm officially out of ideas. ¯\_(ツ)_/¯ I can't imagine how a non-Craft authenticated request would cause an Apache 403 forbidden response.  

---

## 0 answers

