PDF Stamper – Settings "Update Options" button gives 403 Forbidden error

[sci3ntist]

I am using PDF Stamper Plugin with WordPress 4.1.

In the plugin settings page (General settings tab), clicking

– the Update Options button at the bottom of the page

– the Reset to Default button at the bottom of the page

– the Reset log button

they all produce a 403 Forbidden error (Access to this resource on the server is denied!)

So, I cannot do anything with the plugin.

In the .htaccess there are just some redirects 301 besides standard WordPress stuff.

What might be the cause?

Thanks

[wzp]

What other plugins are you using? Are you using any special security plugins?

[sci3ntist]

The page giving the error is:

mydomain.com/wp-admin/admin.php?page=wp-pdf-stamper/wp_pdf_stamp1.php

I have the following plugins (none is about security)

Akismet

Contact Form 7

Download Manager

Duplicate Post

Envato WordPress Toolkit

Force Regenerate Thumbnails

Kraken Image Optimizer

LayerSlider WP

MaxButtons

Really Simple CAPTCHA

Recent Tweets Widget

Revolution Slider

WordPress SEO

WPBakery Visual Composer

wpLike2Get

WP PDF Stamper

[wzp]

Please go through this checklist to determine if any of the other plugins are contributing to the problem:

https://support.tipsandtricks-hq.com/forums/topic/test-to-identy-a-conflicting-theme-or-plugin

[sci3ntist]

I switched back to default theme and the error remains.

I deactivated all plugins but the tolerated common ones and the error remains.

I even tried to uninstall and reinstall the plugin, but nothing.

What to do now?

[admin]

Very weird, is your server using litespeed by any chance?

Do you have a htacess file in your “wp-admin” folder also?

[sci3ntist]

I don’t have litespeed.

No .htaccess file in the wp-admin folder.

Also manual stamping gives 403 forbidden error.

I deactivated all plugins and then performed a clean reinstall of the plugin.

Now I am lost.

[sci3ntist]

Solved, but I fear this is a security leak for my whole site.

I had to add to my .htaccess in the WordPress folder the following lines:

<IfModule mod_security.c>

SecFilterScanPOST Off

</IfModule>

[wzp]

Only if your hosting provider is still running Apache 1.x; in which case, you should be even more worried.

So ask your provider if they are using old version of Apache.

[sci3ntist]

Hello, After months of correct behavior, the plugin started giving Error 403 Forbidden Access to this resource on the server is denied!

ERROR on this pages:

– Manual stamping NOT working:

[DOMAIN PATH]/wp-admin/admin.php?page=manual_stamp_page

– Settings page (on Update)

[DOMAIN PATH]/wp-admin/admin.php?page=wp-pdf-stamper%2Fwp_pdf_stamp1.php

[admin]

This is NOT an issue in our plugin. So first focus on the plugins you added to your site. Have you done the conflict test with the plugins? Has your hosting provider changed settings in your server?

[sci3ntist]

Hello, Disabling ModSecurity on the server, it works.

[wzp]

Disabling ModSecurity on the server, it works.

You need to ask your hosting provider to help you “find” the correct ModSecurity rule that will permit the plugin to operate properly.

[Author]

Posts