403 Forbidden on page update ONLY

  • Morning all, not sure if this is “fixing” or “networking”. But just had an issue with a DDOS and moved our single site (hosted in AWS) behind an ELB load balancer. The ELB does ALL the SSL decryption and talks HTTP to the server. I had added 3 servers to handle the load, it did great, and now that things have slowed down I have removed them leaving just one server.

    Now, I can login to the admin, I can update contact form 7 items, posts, but when I update a page, I get a 403 Forbidden (and it’s not an apache one from what it looks like), just a plain white page (similar to the AWS 503 if your familiar). So when I hit [update] to push those updates, the last log I see in the apache log is;

    ip – – [15/Dec/2020:09:55:39 -0500] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 575 “https://mydomain.com/wp-admin/post.php?post=4793&action=edit” “Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36”

    File and folder permissions are fine, and we can talk to mysql fine (as I can update other parts), so I am thinking it’s something related to HTTPS, but not sure, any thoughts or suggestions is appreciated.

Viewing 3 replies - 1 through 3 (of 3 total)

  • We have the same issue with AWS ELB, and Updating posts with Gutenberg.

    .../wp/wp-admin/post.php?post=X&action=edit&meta-box-loader=1&meta-box-loader-nonce=XXX&_locale=user and
    .../wp-json/wp/v2/pages/X?_locale=user
    returns 403

    But if we switch the DNS to point directly to the EC2 instance it works fine

    • This reply was modified 3 years, 11 months ago by brand42. Reason: Formatting
    • This reply was modified 3 years, 11 months ago by brand42. Reason: removed nounce
    Thread Starter xlancealotx

    (@xlancealotx)

    Interesting, the issue is naturally the server was moved to a private subnet so can’t connect from the outside.

    So the workaround would be to move that to a public subnet and attach directly I guess.

    same issue with my site.Did you find any solution?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘403 Forbidden on page update ONLY’ is closed to new replies.

Tags