Forum

Hi Hugo,

I have been using wordpress with Hiawatha for 3 years and today I had my first problem..
I am trying to activate a plugin license key (mailpoet3) and when I hit save, I get

Forbidden
403

When I look at the log file I get

65.30.xxx.xx|Wed 23 May 2018 12:14:21 +0000|URL contains forbidden characters

I sent the url in private message as it contain too much private data

Could you please help

VirtualHost {
 Hostname = mydomain.co.uk
 WebsiteRoot = /usr/home/mydomain/public_html
 StartFile = index.php
 #UseLocalConfig = yes                                                  # Tell Hiawatha to use or ignore .hiawatha files

## Login
 AccessLogfile = /usr/home/mydomain/public_html/logs/access.mmamats.co.uk.log
 ErrorLogfile = /usr/home/mydomain/public_html/logs/error.mmamats.co.uk.log

## CGI
 TimeForCGI = 60
 UseFastCGI = PHP7-FPM-mmamats

## Header
 CustomHeader = X-Frame-Options: sameorigin
 CustomHeader = Vary: Accept-Encoding

## Error handling
 #ErrorXSLTfile = /usr/local/etc/hiawatha/error.xslt
 ErrorHandler = 404:/error.cgi

## Directory
 UseDirectory = expire_1month, expire_2month

## Toolkit
 UseToolkit  = webmail, wordpress

## Security Settings Variables
# DenyBody = ^.*%3Cscript.*%3C%2Fscript%3E.*$                    # If the request body matches the case insensitive regular expression, return a 403 Forbidden

# PreventCSRF = detect                                           # Ignor all cookies sent by a browser when following an external link
                                                                # Can cause problems for wordpress
                                                                # Default = no

# PreventSQLi = detect                                           # Prevent SQL-injection by detecting injections and denying the request via a 403, 404 or 441 response.
                                                                # NOT 100% guarantee, resource intensive!

# PreventXSS = block                                             # Prevent cross-site scripting via the URL by replacing a less-then, greater-then, quote or double-quote in the URL with an underscore.

}

PS: I can send the url via email as it contain too much private data for the forum

That's quite an insane URL you sent me. Try adding 'SecureURL = no' to your virual host configuration.

Hi Hugo,

The 403 error is gone but I now have a white screen.
btw is 'SecureURL = no' in the documentation? I couldn't find it

Fixed it..
Stupid wordpress plugin conflict
Not Hiawatha fault