Settings change and ModSecurity

  • Resolved Bobosom

    (@bobosom)


    3 years, 8 months ago

    Hello.
    On my web hosting is enabled ModSecurity. When i want to change setting, it will return 403 error. When i disable ModSecurity, changing settings is working. I gues, that is something in POST request that ModSecurity do not like.
    I am sorry, but i dont have access to logs.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author robertabela

    (@robert681)

    Thank you for trying our plugin and for taking the time to post this @bobosom

    Unfortunately without any logs or without the firewall’s configuration, it is very difficult to determine what the issue might be. One way to troubleshoot this is to try to save different settings and see if the firewall behaves differently.

    For example, if you do not make any changes, and click save, is the request still blocked by the firewall?

    Looking forward to hearing from you.

    Thread Starter Bobosom

    (@bobosom)

    Thank you for advice. I tried to save different settings. I found, that problem is in allowed files. When there is added wp-config, or htaccess, than is returned 403. Maybe some other files is doing problems, but i did not try.

    Plugin Author robertabela

    (@robert681)

    Thank you for the update @bobosom

    It seems like your ModSecurity has some checks for those files, it is configured in a way so if someone tries to request them it blocks the connection. However, it seems it is also blocking connections that refer to them.

    Maybe you can contact your web host to help you solve this issue. As such there is not much we can do from our end. If you have any other questions or further updates, please do not hesitate to contact us.

    Have a great day.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Settings change and ModSecurity’ is closed to new replies.