Urgent Help required (403 Error)

Chielou June · Nov 6, 2022

I cant install any plugin on my site.
Getting 403 error always.

Tried disabling all plugins and renaming htdoc, but not working.

https://screenrec.com/share/Aj5ZOhwuvq

jtwings · Nov 6, 2022

How did you install WordPress?

Alexion · Nov 6, 2022

El Professor said:
I cant install any plugin on my site.
Getting 403 error always.

Tried disabling all plugins and renaming htdoc, but not working.

https://screenrec.com/share/Aj5ZOhwuvq

In 99% of the cases, the solution is to disable mod_security from your cPanel.
if you don't have cPanel, ask support to (temp)disable it.

Chielou June · Nov 6, 2022

it was working fine. it has a running site.

jtwings said:
How did you install WordPress?

thru cpanel

Alexion said:
In 99% of the cases, the solution is to disable mod_security from your cPanel.
if you don't have cPanel, ask support to (temp)disable it.

i have no idea how to do that. let me see once.

Magic555 · Nov 6, 2022

Could be a permissions issue you should contact your hosting and let them know. Are you able to upload images?

Chielou June · Nov 6, 2022

Magic555 said:
Could be a permissions issue you should contact your hosting and let them know. Are you able to upload images?

Contacted hosting guy already. He is from BHW, but not getting any good response from him.

Gogol · Nov 6, 2022

The first step is to check the error log. It will tell you exactly what is happening. Cpanel should have error logs feature built in, but not sure.

Alexion · Nov 6, 2022

El Professor said:
it was working fine. it has a running site.

thru cpanel

i have no idea how to do that. let me see once.

You click ModSecurity, and disable it for your website, or all of them.
Takes 3-4 minutes to take effect.

Chielou June · Nov 6, 2022

Alexion said:
View attachment 231604
You click ModSecurity, and disable it for your website, or all of them.
Takes 3-4 minutes to take effect.

seems not having that

Divit0n · Nov 6, 2022

check htaccess file and file permissions

Alexion · Nov 6, 2022

El Professor said:
seems not having that
View attachment 231605

You could try via .htaccess

But it will probably require apache restart.
Better wait for your customer support.

Kind of a shitty move from their part not allowing customers to togle that by themselves.

Chielou June · Nov 6, 2022

Divit0n said:
check htaccess file and file permissions

its 744

Chielou June · Nov 6, 2022

HTACCESS


<FilesMatch ".(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|suspected)$">
</FilesMatch>
<FilesMatch "^(index.php|credits.php|customize.php|edit-comments.php|edit-tags.php|edit.php|checkbox.php|export.php|input.php|link.php|load-scripts.php|load-styles.php|dropdown.php|menu.php|nav-menus.php|network.php|options-discussion.php|options-general.php|options-permalink.php|options-privacy.php|options-reading.php|options-writing.php|plugins.php|post-new.php|post.php|privacy.php|profile.php|site-health.php|term.php|text.php|themes.php|tools.php|update-core.php|user-edit.php|user-new.php|users.php|wp-links.php|wp-login.php|wp-signup.php)$">
Order allow,deny
Allow from all
</FilesMatch>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php74” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php74___lsphp .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

Divit0n · Nov 6, 2022

guys is litespeed server maybe try to change php version or also reset permalinks - go to settings, and select permalinks and click save

Chielou June · Nov 6, 2022

Divit0n said:
guys is litespeed server maybe try to change php version or also reset permalinks - go to settings, and select permalinks and click save

Alexion said:
You could try via .htaccess
View attachment 231606
But it will probably require apache restart.
Better wait for your customer support.

Kind of a shitty move from their part not allowing customers to togle that by themselves.

tried that too but not working

RAP · Nov 6, 2022

El Professor said:
HTACCESS

<FilesMatch ".(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|suspected)$"> </FilesMatch> <FilesMatch "^(index.php|credits.php|customize.php|edit-comments.php|edit-tags.php|edit.php|checkbox.php|export.php|input.php|link.php|load-scripts.php|load-styles.php|dropdown.php|menu.php|nav-menus.php|network.php|options-discussion.php|options-general.php|options-permalink.php|options-privacy.php|options-reading.php|options-writing.php|plugins.php|post-new.php|post.php|privacy.php|profile.php|site-health.php|term.php|text.php|themes.php|tools.php|update-core.php|user-edit.php|user-new.php|users.php|wp-links.php|wp-login.php|wp-signup.php)$"> Order allow,deny Allow from all </FilesMatch> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . index.php [L] </IfModule> # php -- BEGIN cPanel-generated handler, do not edit # Set the “ea-php74” package as the default “PHP” programming language. <IfModule mime_module> AddHandler application/x-httpd-ea-php74___lsphp .php .php7 .phtml </IfModule> # php -- END cPanel-generated handler, do not edit

Where are the WP rules?

With a WP installation in .htacess there is ALWAYS some WP config.

Something like this:

# BEGIN WordPress
# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

I do not see these rules in your .htacess.

EDIT: copy and paste the rules in yout htacess and let us know.

Gogol · Nov 6, 2022

El Professor said:
HTACCESS

<FilesMatch ".(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|suspected)$"> </FilesMatch> <FilesMatch "^(index.php|credits.php|customize.php|edit-comments.php|edit-tags.php|edit.php|checkbox.php|export.php|input.php|link.php|load-scripts.php|load-styles.php|dropdown.php|menu.php|nav-menus.php|network.php|options-discussion.php|options-general.php|options-permalink.php|options-privacy.php|options-reading.php|options-writing.php|plugins.php|post-new.php|post.php|privacy.php|profile.php|site-health.php|term.php|text.php|themes.php|tools.php|update-core.php|user-edit.php|user-new.php|users.php|wp-links.php|wp-login.php|wp-signup.php)$"> Order allow,deny Allow from all </FilesMatch> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . index.php [L] </IfModule> # php -- BEGIN cPanel-generated handler, do not edit # Set the “ea-php74” package as the default “PHP” programming language. <IfModule mime_module> AddHandler application/x-httpd-ea-php74___lsphp .php .php7 .phtml </IfModule> # php -- END cPanel-generated handler, do not edit

Seeing these rules, you could be blocked by your own htaccess. I see that wp-login.php is in the deny list, which might be the reason. Seems like it is not a server error because that way you won’t be getting 403, but a 500.

edit: try removing wp-login.php from that list.

edit 2: After removal, it becomes (untested, use with caution)..


<FilesMatch ".(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|suspected)$">
</FilesMatch>
<FilesMatch "^(index.php|credits.php|customize.php|edit-comments.php|edit-tags.php|edit.php|checkbox.php|export.php|input.php|link.php|load-scripts.php|load-styles.php|dropdown.php|menu.php|nav-menus.php|network.php|options-discussion.php|options-general.php|options-permalink.php|options-privacy.php|options-reading.php|options-writing.php|plugins.php|post-new.php|post.php|privacy.php|profile.php|site-health.php|term.php|text.php|themes.php|tools.php|update-core.php|user-edit.php|user-new.php|users.php|wp-links.php|wp-signup.php)$">
Order allow,deny
Allow from all
</FilesMatch>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php74” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php74___lsphp .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

Chielou June · Nov 6, 2022

RAP said:
EDIT: copy and paste the rules in yout htacess and let us know.

did and not working.

bartosimpsonio · Nov 6, 2022

Reinstall wordpress. There's clearly something broken in your install.

Chielou June · Nov 6, 2022

bartosimpsonio said:
Reinstall wordpress. There's clearly something broken in your install.

worried about the posts published.

Urgent Help required (403 Error)

Failed to resolve a dispute resolution thread.

Junior Member

Banned - Shitlisted and did not do the right thing

Failed to resolve a dispute resolution thread.

Regular Member

Failed to resolve a dispute resolution thread.

Administrator

Banned - Shitlisted and did not do the right thing

Failed to resolve a dispute resolution thread.

Power Member

Banned - Shitlisted and did not do the right thing

Failed to resolve a dispute resolution thread.

Failed to resolve a dispute resolution thread.

Power Member

Failed to resolve a dispute resolution thread.

Senior Member

Administrator

Failed to resolve a dispute resolution thread.

Elite Member

Failed to resolve a dispute resolution thread.

Main Menu

Marketplace

Making Money

BlackHat World