Error 403 - Backend - Global configuration and Module
By marobertti on Thursday, 19 November 2020
Posted in JEvents (Free Access)
Replies 11
Likes 0
Views 667
Votes 0
As weird as it sounds, even as a Super User, when I'm trying to change configuration of JEvent in backend, whenever I clic on Save or Save and continue buttons, it returns a 403 error stating "Access to this resource on the server is denied!". From what I see in the Authorization section, Super User is supposed to have all access though. How can I correct this issue?
I also tried with another Super User account, and with an Administrator account, same results.
Can't Save changes in Configuration, nor in Module configurations...
Hello,

Can you provide a screenshot of the error? I have see this happen at the server level for Litespeed, it doesn't like a certain rule with mod_security. Disabling mod_security quickly as a test will confirm and you can raise with your host to whitelist the rule.

Many thanks
Tony
tonyp
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Hmmm yup. Seems like my server is Litespeed... Here's the error. How do I disable mod_security?
marobertti
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Yep that is a litespeed issue with the mod_security. You will likely have the same issue editing a template .php file too.

If you send a message to your host with logins on how to recreate the error they can whitelist the rule being hit.

Many thanks
Tony
tonyp
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
I do have the exactly same problem. My hoster gave me that answer:

Thank you for waiting.
Whitelisting mod_security rules for individual accounts requires the WHM server to have an additional plugin installed which would affect rules for all domains (including other customers'), which currently we are unable to do.
I am sorry for the inconvenience, I really wish I could help more. I assure you wee investigated it thoroughly and did all we could ?
schluemmel
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
The only thing I can do to prevent that is to disable modsecurity while I configure my JEvents Core or Latest Event module. And then I activate it back. Works
marobertti
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks, works great. Not the best way, but works for me.
schluemmel
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
You will find it on other core extensions too like templates. I need to spend some time looking at what is triggering it.
tonyp
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Tonyp:
Another solution would be to access the tables in the database directly. What tables and rows hold the configuration data of jevents? as well as Jevents latest module?

I have the same problem as above.

Thank You
Bob
brynk
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Bob,

Best is to add:



<IfModule mod_security.c>

  SecFilterEngine Off

  SecFilterScanPOST Off

</IfModule>


to your .htaccess file for when editing for now opposed to editing config values as they are json stored so easily miss-edited.

Many thanks
Tony
tonyp
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Thank You, the hosting provider located the mod_security rules for me and we were able to make the edits.
brynk
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
Could you find out which rule so I can review this more?
tonyp
·
4 years ago
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post