Can't save edited templates in version 3.8.3 - error 403 forbidden message

[ilrglen]

Recently I have encountered a problem saving templates I wish to edit. I am able to open a template in the style manager and make changes but when I click the SAVE or SAVE AND RELOAD I get redirected to an ERROR 430 FORBIDDEN message from the ISP's servers. Am I missing some file or component somewhere in the software package or is there a file that is supposed to be called for that it can no longer find? Somebody help please...

[greigeh]

Sounds like your being denied access, could be cause the CHMOD for your files are wrong.

[Black Tiger]

If you are making template changes, you can better use the TMS mod which works perfectly and you won't have the forbidden issues.
https://vborg.vbsupport.ru/showthread.php?t=152931
Use the 1.1.5 zipfile this is for 3.8.x versions of vBulletin.

[TheLastSuperman]

greigeh could be right above ^. I would also check file ownership i.e. are any files uploaded as a different user such as one under root and one under another name? If you recently updated any files via ftp this might be the case.

What exactly are you trying to save in the template? By chance are you using Google's pagespeed insights and trying to make changes, if so trying to save tons of javascript inline or similar is not advised (well they advise it is but only if a small snippet so if large = no no ect).

[TheLastSuperman]

If you are making template changes, you can better use the TMS mod which works perfectly and you won't have the forbidden issues.
https://vborg.vbsupport.ru/showthread.php?t=152931
Use the 1.1.5 zipfile this is for 3.8.x versions of vBulletin.

Ahh now that I didn't realize i.e. TMS won't cause the forbidden error, pretty nifty and thanks for posting :D

"Sorry you're not allowed to like this post" but I'm allowed to comment and say thanks for info haha!

[Paul M]

Sounds like your being denied access, could be cause the CHMOD for your files are wrong.Templates are stored on the database, so unaffected by file permissions.

Sounds more like an over active security module on apache seeing something it doesnt like in the POST request.

[ilrglen]

I believe my ISP moved my site to a new server in the past month or two and this issue wasn't encountered until after that time

[Lynne]

Is Suhosin or mod_security enabled on this new server? (You will need to ask your host this and, at the same time, mention the problem and perhaps they can fix it.)

[ilrglen]

Is Suhosin or mod_security enabled on this new server? (You will need to ask your host this and, at the same time, mention the problem and perhaps they can fix it.)

I will check. The 403 Forbidden message continues...
"The page you are looking for might have been removed, had its name changed, or is temporarily unavailable." So I am wondering what page is being called for when I click SAVE or SAVE AND RELOAD that might even be missing with the move? Any help with that?

[Lynne]

Open the page outside of the frame and then when you click Save, the URL with change and you can see where it is going.

[Paul M]

Again, nothing is missing, you would get a 404 error if it were.

The server (or firewall if you are routed via one) is intercepting the request and blocking it.

Speak to your host.

[ilrglen]

Open the page outside of the frame and then when you click Save, the URL with change and you can see where it is going.

So it's looking for /template.php?do=updatetemplate

[Lynne]

And that is correct.

You really need to talk to your host because I would guess suhosin or mod_security is causing the issue.

[ilrglen]

And that is correct.

You really need to talk to your host because I would guess suhosin or mod_security is causing the issue.

Thank you. That's what I needed to know. They have told me that there was some new security installed and we are sorting in out together. Thanks for your help.

[yahsuah]

I had exactly same problem. The hosting company installed mod_security without informing me.

I put these codes at the top of the site's root htaccess file.

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>