403 Forbidden error

Hello,

The plugin normally does not do that. You can verify this by setting up on a default WP install. So most likely there is something else that is interfering, could be a plugin, theme, or maybe something in your site’s .htaccess file. Best advice would be to do some basic troubleshooting. I would be glad to send a guide if it would be useful for you.

Hi,
I have same problem as well.

@dusan59 same response for you:

The plugin normally does not do that. You can verify this by setting up on a default WP install. So most likely there is something else that is interfering, could be a plugin, theme, or maybe something in your site’s .htaccess file. Best advice would be to do some basic troubleshooting. I would be glad to send a guide if it would be useful for you.

Updated to add:

If anyone can provide steps to replicate the reported issue on default WordPress install (i.e., default setup, plugins, theme), it will enable me to recreate the issue and investigate asap. Let me know if any questions about this.

Hi Jeff,

I have completed the troubleshooting steps you suggested and still get the 403 error.
I changed the theme to 2020, deactivated all the plugins except Wordfence Security, WP Total Cache, and yours, but I still get the same error every time I try to save the changes.

Thanks

Then it must be something on your server. Are you getting errors in your site’s log file(s)? Need some sort of clue, in order to understand what might be happening.

Hi Jeff,

I have been in contact with my hosting provider support and this is their response:

“I understand your issue, the ModSecurity is blocking the ‘User Submitted Posts’ Plugin. You can remove the ModSecurity restriction by adding the below code in ‘.htaccess’ file.

=========

< IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
 < /IfModule>

However, I had read elsewhere that it’s a bad idea to alter the ModSecurity restriction.

It does work, but do you have any thoughts on this?

Thanks,

David

Hi David,

I never use mod security so I can’t speak for it.

Also I have never heard (in over 10 years developing the plugin) of mod security being an issue with anything USP related. So this is a first.

If it were me, I would ask my web host for more specific information. Like:

1) What about mod security is preventing the plugin from working?
2) Does it only block USP or any/all post-related plugins?
3) Instead of disabling mod sec entirely, can just make an exception for the specific form page/URL?

And so forth. Your host should be able to provide all of this information gladly.

Also, as the reported issue is not with the plugin, I’m going to mark this topic as resolved. Please feel free to post again with any further infos, feedback, etc. Or if I can provide any further infos about the plugin, let me know. Thank you, David.