tinghung

I found the server in nginx.
it not used mod_security.

so Why wc-ajax=update_order_review send 403 error ?

I found the checkout page loading first, it work fine.

But when work sometime on the same browser, it will return 403, and can not finish the checkout process.

I have a problem that the development practice the page when loading correct way is using get method. and the ajax data get usually using http get method.

But when checkout page is loading, the ajax calling of wc-ajax=update_order_review is using post method, so the web server think this ajax calling is 403 FORBIDDEN.

so why not use http get calling when wc-ajax=update_order_review request?

Why to mod_security will block the request?

Because when I first checkout the page or a use a clear browser to checkout the page. it will work fine.

But maybe later it will return 403, and can not finish the checkout process.