Jason

Hi again,

My hosting company says ModSecurity runs on the server.

***The list of security settings I provided earlier are in the WP Toolkit within cPanel. I did not include that note.

Theory: I should turn off any security features in AIOS that are duplicates to WP Toolkit. The reason is the WP Toolkit is on the server.

I am not a developer. I’m learning as I go.

Thoughts?

Thanks for your thorough response.

I will contact my hosting company and ask about the process you laid out.

Cheers. Jason

Hi again,

I wonder if the cPanel security settings are a conflict with AIOS?

And I wonder if they are duplicating the same functions for WordPress security?

Here are the settings that can be turned on in cPanel:

• Restrict access to files and directories
• Configure security keys
• Block access to xmlrpc.php
• Block directory browsing
• Forbid execution of PHP scripts in the wp-includes directory
• Forbid execution of PHP scripts in the wp-content/uploads directory
• Block access to wp-config.php
• Disable scripts concatenation for WordPress admin panel
• Turn off pingbacks
• Disable PHP execution in cache directories
• Disable file editing in WordPress Dashboard
• Change default database table prefixEnable bot protection
• Block access to sensitive files
• Block access to potentially sensitive files
• Block access to .htaccess and .htpasswd
• Block author scans
• Change default administrator’s username

Hi again,

After days without a problem the 403 error popped up again. This time it appeared on the second browser. I make changes in my WordPress site in Chrome. I have Safari open to look at how my changes appear. I am “NOT” logged in to my site on Safari. I want to look at the site as other users.

Does the AIOS plugin work with Mod Security in cPanel?

I have Mod Security on in cPanel. It is on by default from the hosting company. I have not made changes in there.

Thanks. Jason

Thanks for the information.

Jason

Hi,

Thank you for the prompt and specific details. I will save the notes in my error spreadsheet.

I decided to do a one click deactivate of all my plugins. Then I reactivated them with one click. Strangely, that seems to have resolved the problem. (knock on wood ??

Side question: When I clicked the Enable debug button I was expecting that to turn off the firewall temporarily. I did not notice any difference. What is the purpose of that debug feature?

Thanks. Jason