• Resolved G-Olly

    (@g-olly)


    Hi I have recently updated wordpress and my theme avada to the latest versions. Whenever I ry to edit a page I get thrown out via a 403 error page that lasts for around 3-4 minutes but then lets me back in. This seems to be the only action that causes this issue. Is it some setting in your plugin that could be doing this? As it seems like a security function.

    https://www.ads-software.com/plugins/bulletproof-security/

Viewing 15 replies - 1 through 15 (of 20 total)
  • Plugin Author AITpro

    (@aitpro)

    Post the 403 error from your BPS Security Log so I can take a look at it. BPS logs all 403 errors whether or not the 403 error is related to or caused by BPS. You can do the BPS troubleshooting steps: https://forum.ait-pro.com/forums/topic/read-me-first-free/#bps-free-general-troubleshooting to confirm or eliminate or isolate the issue/problem.

    Thread Starter G-Olly

    (@g-olly)

    Thanks for the prompt reply AITpro, I will post it up once I am able to get onto the dashboard. Just been 403’d again.

    Thread Starter G-Olly

    (@g-olly)

    Okay I seem to have a problem. I cannot access the security log generated by BPS because as soon as I click on any tab within the dashboard I get thrown out via a 403. It seems to be getting worse. Everything is up-to-date. I have deactiavted all plugins. I have tried all themes to no avail. I have removed htaccess both wp-admin and root. Don’t know what to do next. Any help would be greatly appreciated.

    Plugin Author AITpro

    (@aitpro)

    You can access the BPS Security Log file manually by using FTP or your web host control panel file manager. The Security Log file is here: /wp-content/bps-backup/logs/http_error_log.txt.

    Thread Starter G-Olly

    (@g-olly)

    Thanks, should I post the results onto here?

    Plugin Author AITpro

    (@aitpro)

    Only post the last few relevant Security Log 403 errors and not your entire Security Log file contents.

    Thread Starter G-Olly

    (@g-olly)

    edited

    Plugin Author AITpro

    (@aitpro)

    Please edit your reply and delete all of the Security Log entries. I do not see anything unusual and just see standard log entries for things that should be blocked.

    At this point I do not believe the problem is related to or being caused by the BPS plugin and have a feeling that the problem that has occurred is that your WordPress 4.5 upgrade installation did not complete fully/successfully. Do these steps below to manually upload new WordPress 4.5 folders and files to your website.

    1. Download the WordPress 4.5 zip file here: https://www.ads-software.com/download/
    2. Unzip the zip file on your computer.
    3. Use FTP and connect to your website.
    4. Upload all WordPress root files to your website root folder, Upload the entire wp-content folder, wp-includes folder and wp-admin folder to your website.

    Note: doing these steps will ensure that your WordPress 4.5 installation is complete and will NOT overwrite any unique/specific files for your website. ie wp-config.php will not be overwritten. ie uploading the unzipped WordPress 4.5 wp-content folder will not overwrite your personal theme files or anything else in your wp-content folder like your personal plugins installed.

    Thread Starter G-Olly

    (@g-olly)

    Thanks for taking a look. This is what I thought as well. So I have done a backup from 2 days ago. Before any wordpress core or theme update. I am still receiving the same error. Arrrggghh….

    Plugin Author AITpro

    (@aitpro)

    Ok before contacting your web host since this could be a web host server change of some kind on your server that is causing the problem, make sure that you are restoring a backup that is actually a good backup. You probably only need to restore your website files and NOT your WordPress database. If your web host automatically does file backups then use a good file backup that your web host did 1 week ago and restore it. Or you can just do the manual WordPress file upload steps that I listed above. If the same problem is still occurring then you want to look at your avada theme upgrade next. If you have a copy of your last avada theme files/version then manually upload your avada theme folder to your /themes folder. Personally I would delete the old avada theme folder and upload a new avada theme folder. If you have made any theme file customizations or have a child theme then download a backup of those avada theme folders/files first.

    Plugin Author AITpro

    (@aitpro)

    I checked this site: garxxxxxxxkle.co.uk (used the Security Log entries you posted previously to figure out your website) and see that the frontend of the website is up. You are using Basic Authentication in your wp-admin htaccess file. You are using cloudflare and WPFC minification.

    Try these things in this order and test things after doing each step.
    1. rename your wp-admin .htaccess file to: hold_.htaccess
    2. disable cloudflare.
    3. rename your /plugins folder to: /_plugins.

    Thread Starter G-Olly

    (@g-olly)

    I have already done a backup restore of the database as I thought that this could be adding to the problem as the core update to 4.5 upgraded my database. The restore that I did included all files and the database for the site when it was running the avada theme 3.9.3 and wp 4.4.2 which worked fine.

    I have been in contact with my hosts (one of the first things I did) they have said that there has been no server changes. And I have also provided them with login details to the site. Funny thing is they say that they can go onto the site make changes, view it fine etc. without any 403. Very strange.

    So you think that I should restore to a week previous? Okay. Again, thanks for your help.

    Thread Starter G-Olly

    (@g-olly)

    Ahh just seen your latest reply, not a problem and thanks for looking. I will do as you have suggested.

    Plugin Author AITpro

    (@aitpro)

    Funny thing is they say that they can go onto the site make changes, view it fine etc. without any 403. Very strange.

    DOH! Clear/delete your Browser Cache. If that does not work then switch to a different Browser. If that does not work then disable any/all Browser add-ons/extensions. If that does not work then if you are using a VPN or something else on your computer like a security application then temporarily turn that off. The next thing to look at would be your ISP itself. ie your ISP is doing some security measure that is causing you to be kicked out of your website.

    Thread Starter G-Olly

    (@g-olly)

    I did all of the things you suggested in order but still no dice.

Viewing 15 replies - 1 through 15 (of 20 total)
  • The topic ‘403 error: access to this resource on the server is denied’ is closed to new replies.