Thumbnail image 403 Forbidden due to iThemes Security

  • Peter_Young

    (@oils4painting)


    3 years, 9 months ago

    Hello,
    After implementing the plugin and obtaining an API key for ‘YouTube Data API v3’ I received a 403 Forbidden return code for each YouTube thumbnail image. These errors were seen in the Browser’s web console. After many frustrating hours of recreating API keys and resetting restrictions, I found the reference to ‘Thumbnail was not loading – iThemes security (fix found)’ in the WP YouTube Lyte support forum. Ref…https://wordpress.org/support/topic/thumbnail-was-not-loading-ithemes-security/

    I use iThemes Security Pro, and iThemes Security setting for section ‘System Tweaks’, option ‘Disable PHP in Plugins’ was enabled.

    iThemes explanation: “Disable PHP execution in the plugins directory. This blocks requests to PHP files inside plugin directories that can be exploited directly.”

    By disabling option ‘Disable PHP in Plugins’, clearing the WP YouTube Lyte cache, I was able to refresh the Videos page and load the Thumbnails. The ‘Disable PHP in Plugins’ option has been enabled again (my preferred setting for security reasons), and the Thumbnails remain in the WP YouTube Lyte cache (until they are eventually cleared).

    Is there a permanent solution to this problem? I’m sure other Lyte users would have experienced this problem, considering the large user base for iThemes Security. Could WP AJAX be used to load the Thumbnail images as suggested by Benjamin Pick in the above Support Forum chat?

    Thank you,
    Peter Young

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Optimizing Matters

    (@optimizingmatters)

    3 years, 9 months ago

    Hey Peter;
    You’ll have to either disable the “cache thumbnails” option or tweak iThemes security options oils4painting, I’m afraid I’m not planning to go through WP AJAX or other slow layers just to circumvent possible security settings; lyteCache.php is blazingly fast now because it does not involve WordPress core at all and I want to keep it that way 🙂

    hope this clarifies,
    frank

    Thread Starter Peter_Young

    (@oils4painting)

    3 years, 9 months ago

    Hello Frank,
    Thank you for your prompt reply. I have disabled the “Cache Thumbnails” option and the Thumbnail images now load okay. Could you please write a FAQ for this to help any other people who have the same problem.

    Many thanks,
    Peter Young

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Thumbnail image 403 Forbidden due to iThemes Security’ is closed to new replies.