Quote from Pablo Borysenco on August 30, 2019, 11:56

Hello

Paste your license key here - https://c2n.me/42HBIt7.png and  wp-admin access - https://c2n.me/42BAoj4.png

Your user role must have - manage_options

Quote from alien2108 on August 30, 2019, 12:34

Updated private data

Quote from Pablo Borysenco on September 2, 2019, 11:09

Hello

Please add  link to your site

Quote from alien2108 on September 2, 2019, 12:11

added in private notes

Quote from Pablo Borysenco on September 3, 2019, 11:43

Hello

For some reason your site is down!

I did not even have time to do the tests

Quote from alien2108 on September 3, 2019, 11:59

Site is not down, working 100% ok.

Quote from Pablo Borysenco on September 3, 2019, 13:03

Hello

Ok! https://c2n.me/43oOEfW.png

Please provide  me  administrator  role ( I need  to upload some  plugins  - Query monitor+Error  log monitor )

Can I deactivate  plugins/theme  to test?

Quote from alien2108 on September 3, 2019, 15:39

Provided account is admin, you can upload plugins and do stuff, but please revert asap as this is live site.

Quote from Pablo Borysenco on September 4, 2019, 20:02

Hello

For some reason, the server prohibits the storage of content - https://c2n.me/43qCiVz.png

please  read  this -

• https://wordpress.org/support/topic/general-settings-403-error-when-saving
• AND
• http://stackoverflow.com/questions/12928360/how-can-i-disable-mod-security-in-htaccess-file

and  do test  please

Quote from alien2108 on September 6, 2019, 09:30

Hello!

You were right! The issue is with Plesk WAF. Following rule triggers:

[client X.X.X.X] ModSecurity: [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "258"] [id "33350147"] [rev "143"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potentially Untrusted Web Content Detected"] [data ""] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)?(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS:value" required. [hostname "b2b.real-tactical.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XXIH3Tg91ctJKJPSiWRPaQAAAMw"], referer: https://OUR_DOMAIN.COM/wp-admin/edit.php?post_type=product&page=woobe

Quote from Pablo Borysenco on September 6, 2019, 11:03

Hello

Ok! Did you manage to fix this as described in the article?

Quote from alien2108 on September 6, 2019, 11:25

Yes, by disabling WAF in Plesk everything worked. This rule id: 33350147 is the reason (you can see that in logs of WAF) and according to google search happens quite often.

So I disabled just this rule and enabled WAF back and everything still works now.

I would suggest you try to at least report an error (if you can) when you get 403 back, since now it was not even clear to the user what happened...no errors were reported.

Quote from Pablo Borysenco on September 9, 2019, 11:31

Hello

Thank you for cooperation!

We will make an article about this problem.