Hi @clueless4ever
It is 403 forbidden error should be due to WP REST API Disallowed.
WP Security > Firewall > PHP Rules – WP REST API Can you please cross check the Disallow unauthorized REST requests: is enabled if yes either you can disable it or whitelist rest route for real-cookie-banner and check.
https://snipboard.io/wam1hq.jpg
Regards
Hi @hjogiupdraftplus ,
thank you for your reply. All my Firewall Settings in AOIS are off. I do not see that option with Real Cookie on my dashboard. Maybe because it is not the Premium Version ? But all settings in the Firewall and are on OFF.
I get this error message
An error of type E_ERROR was caused in line 70 of the file /srv/www/web1047/apps/photo/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-debug.php. Error message: Uncaught Error: Call to undefined function disk_total_space() in /srv/www/web1047/apps/photo/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-debug.php:70
and so on
when I switch off AIOS both errors below disappear
The scheduled event, wp_fastest_cache_Preload, failed to run.
REST API Endpoint: https://francoiscollaro.com/wp-json/wp/v2/types/post?context=edit
REST API Response: (403) Forbidden
Not sure why but have to admit I am new to WordPress. These are active
Remove WP generator…Change admin username, Change display name, Login lockoutDisable application pass…Database prefix, File permissions, File editing,WordPress files access, Prevent image hotlinking, Enable login honeypot, Enable Copy Protection, Enable iFrame protection
Best,
Hi @clueless4ever,
Hope you have the AIOS 5.4.1 plugin. check the Plugins list for the AIOS version.
WP Security > Firewall > PHP Rules – WP REST API – Disallow unauthorized REST requests Can you please disable this setting?
It seems REST API gives 403 forbidden error due to that.
https://snipboard.io/COQXwM.jpg
IF you are on that section you can see the real-cookie-banner as rest route to whitelist
Uncaught Error: Call to undefined function disk_total_space(). It is strange that it is a PHP function. The hosting provider might have disabled it. Please ask them.
https://www.php.net/manual/en/function.disk-total-space.php
Regards
@hjogiupdraftplus
https://snipboard.io/tKJrXU.jpg
it was never activated and I still do not see what you have on your dashboard. Maybe because I have the FREE Version. Plug in is 5.4.1.
Did work yesterday after I reset the plug in but 24 hours later same error. It is what ist is …
Thank you
Hi @clueless4ever,
Can you please cross check and try disable one by one below setting and check if it solve the issue ?
1) Deny bad query string – WP Security > Firewall > PHP rules tab. URL Security – Deny bad query strings: uncheck the checkbox and save
2) Advanced char filter – WP Security > Firewall > PHP rules tab. – String filtering Enable advanced character string filter :uncheck the checkbox and save
3) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection uncheck the checkbox and save
4) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save
If not, please add the following constant AIOS_NO_FIREWALL to the wp-config.php file and check whether the issue is resolved. This will disable all PHP firewall rules, helping us determine whether the issue is related to them.
define( 'AIOS_NO_FIREWALL', true);
Regards
Hi @clueless4ever
Keep me posted which settings solves the issue.
Regards
@hjogiupdraftplus
I did not change any settings. Just installed an update for the Real Cookie Banner and for now it works fine. Maybe it had nothing to do with AIOS.
Thank you for your help and enjoy your week.
Hi @clueless4ever,
Glad to know issue seems solved.
Would you mind writing a quick five-star review on WordPress.org?
https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/#new-post
Reviews also help others to make confident decisions about our plugin.
Regards
@hjogiupdraftplus
Just did and until today everything is working fine. Thank you for the great support and enjoy your weekend !
Best
Hi, does this make AIOS insecure? define( ‘AIOS_NO_FIREWALL’, true); ?? or is this for a tempery testing?
Hi @winock,
Yes, the constant AIOS_NO_FIREWALL will disable all firewall rules. It should be used to check whether a 403 Forbidden error is being raised due to an AIOS Firewall rule
Regards
