• Resolved artemis21

    (@artemis21)


    Hi,
    when I try to update the page I get the 403 Forbidden error, it happen only in the online version of my site, I have a local version and it works. Both versions are the same (local is just a backup of the remote), also php and wp are the same. Debug won’t show. If I try to make a new page it does work, updating it also. But If I try to edit an old page it does not.

    EDIT: after I’ve re-done the homepage from scartch, and published it, it started giving me 403 again. I tried deactivating all the plugins (even security) but got the same error.

    EDIT2: After disabling the firewall of the site, I looked in the log and saw this error [client 31.44.170.45] ModSecurity: [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "258"] [id "33350147"] [rev "143"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potentially Untrusted Web Content Detected"] [data "/wp-admin/post.php"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)?(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:meta[28363][value]" required. [hostname ""] [uri "/wp-admin/post.php"] [unique_id "8whQAxxxxxxxxxxxAAJg"], referer: https://www.xxxxx.it/wp-admin/post.php?post=4609&action=edit
    It might be usefull if you plan to fix this…

    • This topic was modified 7 years, 4 months ago by artemis21.
    • This topic was modified 7 years, 4 months ago by artemis21.
    • This topic was modified 7 years, 4 months ago by artemis21.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Contributor alexgso

    (@alexgso)

    Hi artemis21,

    The provided error log suggests you’re experiencing a false positive. Unfortunately, this isn’t something we can directly avoid as we don’t have any direct control over the rule that’s triggering this false positive. To avoid this issue you should either disable the mentioned rule or (this one isn’t recommended) whitelist this specific request.

Viewing 1 replies (of 1 total)

The topic ‘403 Forbidden’ is closed to new replies.