Support » Plugin: BulletProof Security » Cloudflare Bulletproof

  • Resolved dm4n


    Hi. I’m using Bulletproof Security in conjunction with Cloudflare, W3 Total Cache and WP Super Cache.

    I’ve run into a few problems:

    (1) After deactivating all plugins except BPS- the tabs on the BPS dashboard eg Notes/ Custom Code- fail to work.

    (2) I’m getting a 403 error when BPS is activated.

    FYI I’m using as my host.


Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author AITpro


    To troubleshoot BPS issues/problems please check the BPS Forum Read Me First page here:

    Please start reading from the top of the BPS Forum Read Me First page and work your way down the page. Thanks.

    Plugin Author AITpro


    Can this Thread be resolved? If so, please resolve it. If not, then post the latest status.

    Also I just noticed that you have both W3 Total Cache and WP Super Cache installed. I did not think it was possible or would work correctly to have both of these caching plugins installed together.


    Status update: have reinstalled blog from scratch and installing plugins more selectively.

    I read the Read Me First page and checked for the common problems eg broken CPanel Hotlinks but that appeared to be ok.

    I found that changing the root .htaccess from 644 to 404 or 400 yielded the 403 load error as tested by


    Plugin Author AITpro


    The most restrictive file permission you can set for an htaccess file is 404 permissions. 400 file permission will cause a 403 error. If you have a DSO configured Server then you MUST use 644 or less restrictive file permissions (666, 777, etc). If you have a CGI configured Server then most web hosts allow you to set the root .htaccess file permissions to 404. Some do not:

    Since you are using 2 caching plugins at the same time and you are using mod_rewrite with WPSC then this means both caching plugins are creating .htaccess code in your root .htaccess file. Caching code MUST come before the BPS .htaccess code.

    See an example here of how to setup WPSC with BPS:

    I am not sure what order you would use for the W3TC and WPSC .htaccess caching code. Or if the htaccess code conflicts with each other. I assume since both of these caching plugins are doing the same or similar things then there is at least going to be some redundancy. Try changing the order of the .htaccess code in your root .htaccess file and see what happens.


    W3TC caching .htaccess code
    WPSC caching .htaccess code


    WPSC caching .htaccess code
    W3TC caching .htaccess code

    That’s useful info about Permission settings.

    There is definitely redundancy in using both- maybe this can be changed via respective configuration settings.

    Thanks for the generous help 🙂


Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Cloudflare Bulletproof’ is closed to new replies.