Control Web Panel

Security => Mod_Security => Topic started by: mason64 on October 30, 2024, 04:37:29 PM

Title: Mod_Security blocking wordpress plugins?
Post by: mason64 on October 30, 2024, 04:37:29 PM

Hi

I had an issue where when i installed Wordpress and Elementor and some plugins that provide addons, if i added an addon to the site it looks fine but as soon as i went to save the page i got an error saying 403 forbidden via elementor in the bottom left hand corner, I could add normally text, headings and the basic stuff using elementor and it saved just not the addon sections. Looking around i found this post

https://forum.centos-webpanel.com/apache/403-forbidden/  It wasn't to do with my issue but it helped as i disabled mod secuirty for the domain that was having the issue and the addons saved just fine. (only have 1 domain on the server at the moment while am testing cwp.

Is it possible to allow certain things past mod security ? i have never used it before sorry so am not sure how it works or how to use it.

Title: Re: Mod_Security blocking wordpress plugins?
Post by: overseer on October 30, 2024, 05:49:40 PM

Are you using the OWASP or Comodo rulesets with Mod Security? I use Comodo on my servers and don't have many problems with false positives (which tend to happen with OWASP).

Title: Re: Mod_Security blocking wordpress plugins?
Post by: mason64 on October 31, 2024, 09:50:24 AM

Hi Thanks for the reply i will take a look now and see which one am using. everything is default but will check.
Thanks
Dave

Title: Re: Mod_Security blocking wordpress plugins?
Post by: mason64 on October 31, 2024, 10:47:22 AM

Thanks changing it fixed it

Logged in to the admin panel > Secuirty > Mod Security and turned on Comodo, the strange thing is, i turned it back to owasp to see if the issue was there but it wasnt. not sure why that happened then.

thanks so much for the help.