• Woke up today to see that WP had been automatically updated to 4.4.1. Now I can no longer administer my site.

    After loging in successfully, I’m redirected in the usual way to my site with the administer’s toolbar at the top. Clicking on anything in the toolbar elicits the following error message:

    Forbidden

    You don’t have permission to access /blog/wp-admin/index.php on this server.

    Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

    I’ve created 10 time-intensive posts since my last weekly backup. Yes, I’m be disabling auto-upgrades and moving to daily backups, but until then I’d really like to be able to recover my site!

Viewing 10 replies - 1 through 10 (of 10 total)
  • Are you confident that it’s a WordPress related issue, because the root of the domain is returning a 403 as well, not just the /blog directory where WordPress is (probably) installed. (I’m also assuming we’re talking about mikejkelley.com, of course)

    Thread Starter mikejkelley

    (@mikejkelley)

    I restored WP completely from a previous backup and then restored the most recent db. My guess is the update overwrote/broke .htaccess or some such.

    Thread Starter mikejkelley

    (@mikejkelley)

    Sorry, should have specified, the blog is on Nickelcitypixels.com which is an addon domain for mikejkelley.com. Thanks for bringing the mikejkelley.com 403 error to my attention (I don’t use mikejkelley.com for anything other than my email currently so I’d have never noticed), I’ll look into it.

    The issue isn’t entirely resolved yet. As it currently stands I won’t be able to upgrade (w/out having to manually upload a bunch of files after the upgrade overwrites everything). Maybe solving the mikejkelley.com 403 will take care of the rest…

    Thread Starter mikejkelley

    (@mikejkelley)

    I think the 403 error is related to a missing index.htm file, I don’t *think* that would effect the addon nickelcitypixels.com (ie mikejkelley.com/ncp).

    Thread Starter mikejkelley

    (@mikejkelley)

    So my initial fix didn’t work. I can administer the site but I see now that nobody can access the posts themselves. Clicking on a post elicits the same error msg.

    Hi all,

    The issue for me was updates to ModSecurity firewall rules in cPanel. After I disabled the rules #214620 & #214940 the WordPress sites are now working again.

    It appears that those rules were updated on 29th December, and the issue has only come to light in the last 48 hours as the 4.4.1 update is installed.

    I hope this helps, if you don’t know how to fix the above you should pass it onto your web hosting provider.

    Regards,

    Andy Readman

    Hi redders887, how can I locate the ModSecurity firewall rules in cPanel?

    Hi rgmt79,

    It’s something the server administrator would need to do for you, so if you contact your web hosting provider they should be able to disable the rules.

    I’m having this problem as well, but I have Plesk, not cPanel. Is this caused by the same issue?

    Hi, i am having also the same issue and use Plesk. Is it possible to change the modsecurity firewall rules from Plesk like cpanel?

    Also, 2 additional questions:
    1) If we disable the specific rules, isn’t this some kind of “discount” on the security quality?
    2) The wp 4.4.1 update was applied to 6 sites i host on the same shared hosting provider and only one of them had this issue. How could this be explained?

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘After auto update to 4.4.1, can no longer admin my site’ is closed to new replies.