• Resolved lbellipanni

    (@lbellipanni)


    When i try to save settings it doesn’t work: the icon next to “save settings” button starts to loading but never ends. I read that could be a host error( i use siteground) but when i try to add the code that i found in my htaccess file, a conflict with the security of siteground starts and they blocks my ip address.
    The code that i found is this:

    <IfModule mod_security.c>
    SecFilterRemove 001868
    </IfModule>
    • This topic was modified 6 years, 2 months ago by lbellipanni.
    • This topic was modified 6 years, 2 months ago by lbellipanni.
Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor W3 Eden, Inc.

    (@w3eden)

    In that case, please ask your hosting support to adjust the issue.

    Hello @lbellipanni,

    Ivan Atanasov from SiteGround here. I am not entirely sure who recommended the code you mentioned in your initial post. What it will do is deactivate the modsecurity rule 001868 for ALL subdirectories of the directory where your .htaccess file resides.

    Meaning, if the code is added in your ~/public_html/.htaccess file it will be valid for your entire website.

    I am against adding this code blindly without confirming if it is needed. Because if this is not the correct rule involved in your issue – it will be deactivated for your website(s) without any reason thus harming the level of security of the application.

    @w3eden is right – it is best that you post a Support Ticket from your SiteGround User Area so that we can investigate and point you in the right direction if it is not a hosting related problem.

    Eric

    (@masterchef93)

    @ivanatanasov I am a SiteGround customer as well, having the same issue.

    Has there been any resolution to this?

    Hello @masterchef93,

    I am not entirely sure what the issue here is. It has not been made clear by the plugin devs or contributors what sort of situation could lead to such a problem.

    @lbellipanni mentioned an IfModule tag that will deactivate the modsecurity rule with ID 001868 for the entire website if the code is placed in the .htaccess file in the root of the site.

    I don’t recommend deactivating modsecurity rules blindly without first receiving a confirmation that the rule is involved. We can investigate this and confirm if this is the case by reviewing our server logs for any related errors.

    Also, we can modify the code to deactivate the rule for a single file, not for the entire website, and this will keep the high security level of the environment your website is running in.

    Post a Support Ticket if you believe we can be of assistance here.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Can’t save settings’ is closed to new replies.