title: 403 Forbidden when passing URL in GET variable
body: <p>I am having a problem like this:<br>
  <a href="https://stackoverflow.com/questions/1089744/403-forbidden-on-php-page-called-with-url-encoded-in-a-get-parameter">403 Forbidden on PHP page called with url encoded in a $_GET parameter</a></p>
  
  <p>I am getting "403 forbidden" error
  When i pass a url as a GET variable like this</p>
  
  <pre class="lang-none prettyprint-override"><code>http://script/test.php?url=https://stackoverflow.com/questions/ask
  </code></pre>
  
  <p>But this is ok.</p>
  
  <pre class="lang-none prettyprint-override"><code>http://script/test.php?url=stackoverflow.com/questions/ask
  </code></pre>
  
  <p>And even if i urlencode the url it still gives me a 403.</p>
  
  <blockquote>
    <p>Apache mod_fcgid/2.3.6 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at ----- Port 80</p>
  </blockquote>
  
  <p>And I don't think this server has mod_security enabled, Because when I add <code>SecFilterEngine Off</code> in htaccess I get "500 Internal Server Error".</p>
  
  <p>Code snippet:</p>
  
  <pre><code>$URL = mysql_real_escape_string($_GET['url']);
  mysql_query("INSERT INTO `url` ...");
  </code></pre>
  
  <p>So the question is, can I fix this without editing httpd.conf, because I don't have root privilege.
  Thanks </p>