• Resolved gr1298

    (@gr1298)


    Hi, I am using Contact Form 7 and when I added Zenfile in my WP I got the message:

    HTTP403:
    FORBIDDEN - The server understood the request, but is refusing to fulfill it.
    (XHR): GET - http://amy-group.com/contact/customer-service?_wpcf7_is_ajax_call=1&_wpcf7=161&_wpcf7_request_ver=1440582663706

    when looking for the problem I got in this block at my .htaccess:

    # Rules to block suspicious URIs
    RewriteCond %{QUERY_STRING} \.\.\/ [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*\.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
    RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
    RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
    RewriteCond %{QUERY_STRING} ftp\:  [NC,OR]
    RewriteCond %{QUERY_STRING} http\:  [NC,OR]
    RewriteCond %{QUERY_STRING} https\:  [NC,OR]
    RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
    RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
    RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>|ê|"|;|\?|\*|=$).* [NC,OR]
    # RewriteCond %{QUERY_STRING} ^.*("|'|<|>|\|{||).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(%24&x).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(127\.0).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(request|concat|insert|union|declare).* [NC]
    RewriteCond %{QUERY_STRING} !^loggedout=true
    RewriteCond %{QUERY_STRING} !^action=jetpack-sso
    RewriteCond %{QUERY_STRING} !^action=rp
    RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$
    RewriteCond %{HTTP_REFERER} !^http://maps\.googleapis\.com(.*)$
    RewriteRule ^(.*)$ - [F]

    Can you help me to identify where or what to fix as when I comment this full block so I don’t get any error!!!
    Thanks in advance, Gg

    https://wordpress.org/plugins/zencache/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Raam Dev

    (@raamdev)

    @gr1298 Those .htaccess rules were not added by ZenCache and the 403 Forbidden error message isn’t being generated by ZenCache either–that’s being generated by your web server, likely some server-side security software that is preventing the web server from making that request. If you’re running a security plugin, that may be causing the issue, otherwise I suggest contacting your web hosting company about this.

    Thread Starter gr1298

    (@gr1298)

    Ok, thanks for the replay. I will get to the web hosting company. I was just trying to identify what was the point with this code. (Oh sorry for the duplication – new win 10 and ….) Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Help with conflict Zencache, contact form 7 and .htaccess’ is closed to new replies.