403 Forbidden Error

[dwm.specops]

Hi there

We recently transferred our site to a new hosting provider to comply with PHP8 and are having some issues when posting content

The 403 Forbidden error is happening specifically when trying to post content that converts a forum hyperlink into a preview. If we remove the preview and have just the hyperlink the content posts fine.

I also tried to edit a post to have the preview and the forum says

"This comment can no longer be edited. It may have been moved or deleted, or too much time may have passed since it was posted for it to be edited."

I read some of the problems that others were having and tried mod_security which didn't seem to work.

[Marc]

Have you checked with your hosting company to see what is causing your 403 there?

[dwm.specops]

2 hours ago, Marc Stridgen said:

Have you checked with your hosting company to see what is causing your 403 there?

Should I? I just upgraded to the latest version as well.

The issue only occurs when trying to post that specific content, all other posts seem to work  fine.

[Marc]

You should, yes. A 403 message from the server is that the server is actively preventing you from performing an action. As you mention, mod_security is the most common, but there are others such as securi

[dwm.specops]

Ok. I’ll ask the provider if there are any reasons why this would happen. Seems odd as have never encountered this before. Thanks again 

[Marc]

51 minutes ago, nanotek said:

Ok. I’ll ask the provider if there are any reasons why this would happen. Seems odd as have never encountered this before. Thanks again 

You wont have experienced it before if you are on a new host

[dwm.specops]

Thanks for your help, the provider managed to sort it out for us

[Gary]

Hi @nanotek,

Thanks for following up and letting us know you have had this issue sorted.

Please don't hesitate to get in touch with us if the error pops up again, or if you encounter any other errors with your community.

[dwm.specops]

So it has happened for a few people and the only way I can fix it is by disabling mod_security altogether which doesn’t seem to be recommended. 
 

Is it OK from an Invision Community perspective? We have it installed to a subdomain and disabled it at that level. The forum is the only thing installed at that subdomain. 
 

Or should we be using the whitelist approach? If so, what are the main things that need to be whitelisted?

[Marc]

As we arent your hosting provider, its not really a question we can answer. We can only say that mod_security is blocking some things incorrectly. Whether or not you have to have it enabled is something for you to discuss with your hosting company