Title: [Plugin: BulletProof Security] Cleeng 403 error
Last modified: August 20, 2016

---

# [Plugin: BulletProof Security] Cleeng 403 error

 *  Resolved [whitelabel](https://wordpress.org/support/users/whitelabel/)
 * (@whitelabel)
 * [13 years, 10 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-cleeng-403-error/)
 * Hello,
 * I’m using a content monetization plugin called Cleeng on my blog which allows
   readers to view the whole post after logging with their Facebook, Google or Yahoo
   account.
 * Since the last update of the BPS, people trying to log in are getting a 403 error.
   Here is an example: [http://anglofil.ro/telenovela-plecarii-lui-van-persie/](http://anglofil.ro/telenovela-plecarii-lui-van-persie/)
 * I’ve read that more often than not these errors are related to file permissions
   but everything looks ok in my Security Status panel: [http://i.imgur.com/PRT8j.jpg](http://i.imgur.com/PRT8j.jpg)
 * The wp-config permission appears to be 0 but I’ve checked with Filezilla and 
   is set to 644 over there.
 * Other than that I’m clueless. Any help would be much appreciated as I’m getting
   quite a bit of aggravation from my readers who can’t log in.
 * Cheers,
    Alex.
 * [http://wordpress.org/extend/plugins/bulletproof-security/](http://wordpress.org/extend/plugins/bulletproof-security/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [13 years, 10 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-cleeng-403-error/#post-2955043)
 * A new security filter was added in BPS .47.2 that protects against a new PHP5.3.
   x and higher versions of PHP known vulnerability/exploit.
 * This is the new security filter in BPS .47.2
 *     ```
       RewriteCond %{QUERY_STRING} \-[sdcr].*(allow_url_include|allow_url_fopen|safe_mode|disable_functions|auto_prepend_file) [NC,OR]
       ```
   
 * And this is the vulnerability that this new security filter protects against.
   The recommended fix on php.net was not used because it does not completely protect
   against some of the real hacking attempts we are seeing/logging.
    [http://www.php.net/archive/2012.php#id2012-05-06-1](http://www.php.net/archive/2012.php#id2012-05-06-1)
 * If you are seeing 0000 permissions for your wp-config.php file in your control
   panel then this usually means one of two things and is not related to BPS whatsoever.
   check with your web host if you see 0000 permissions.
 * 1. your host has locked or suspended your account.
    2. ownership permissions 
   need to be reapplied to the file or folder using CHOWN.
 * Ok so in summary, try and comment out the new security filter and see if user’s
   can log in. This new security filter will also block a coding vulnerability in
   BuddyPress and will have to be commented out if you are using BuddyPress.
    see
   this thread >>> [http://wordpress.org/support/topic/plugin-bulletproof-security-buddypress-and-403?replies=28](http://wordpress.org/support/topic/plugin-bulletproof-security-buddypress-and-403?replies=28)
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [13 years, 10 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-cleeng-403-error/#post-2955087)
 * Hello Whitelabel,
    Please post a status update on this issue. Thanks.
 *  Thread Starter [whitelabel](https://wordpress.org/support/users/whitelabel/)
 * (@whitelabel)
 * [13 years, 10 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-cleeng-403-error/#post-2955091)
 * Hello,
 * Sorry for the delay, I think we’re on different time zones.
 * I ended up replacing the htaccess file with a 471 version from a backup and that
   fixed my problem.
 * It’s not pretty but it works.
 * Many thanks for your help and assistance.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘[Plugin: BulletProof Security] Cleeng 403 error’ is closed to new replies.

 * ![](https://ps.w.org/bulletproof-security/assets/icon-128x128.png?rev=1731938)
 * [BulletProof Security](https://wordpress.org/plugins/bulletproof-security/)
 * [Support Threads](https://wordpress.org/support/plugin/bulletproof-security/)
 * [Active Topics](https://wordpress.org/support/plugin/bulletproof-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/bulletproof-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/bulletproof-security/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [whitelabel](https://wordpress.org/support/users/whitelabel/)
 * Last activity: [13 years, 10 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-cleeng-403-error/#post-2955091)
 * Status: resolved