• Resolved jadestaro

    (@jadestaro)


    I encountered the following problem when trying access my site:
    ————————————————————–
    Forbidden

    You don’t have permission to access /wp-admin/ on this server.
    Server unable to read htaccess file, denying access to be safe

    Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
    ————————————————————-

    I already deleted .htaccess files in the root folder and wp-admin folder but I am still getting the above errors and not able to login or see my website.

    Please help. Thanks.

    https://wordpress.org/plugins/bulletproof-security/

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Author AITpro

    (@aitpro)

    Are you sure you deleted the correct htaccess files in the correct WordPress installation folder and not some other WordPress installation folder?

    Do you have any htaccess files somewhere else under your hosting account folders that are either not a BPS htaccess file or are a BPS htaccess file that you copied to another hosting account folder?

    Example:
    /.htaccess – hosting account root folder has another .htaccess file that is or is not a BPS htaccess file.
    /wordpress-site-installed-here/.htaccess – has/had a BPS htaccess file
    /wordpress-site-installed-here/wp-admin/.htaccess – has/had a BPS htaccess file

    Clear your browser cache. Maybe the browser has cached the old condition that is no longer happening

    Thread Starter jadestaro

    (@jadestaro)

    Sorry I was not clear earlier.

    Site A is okay. I can log in. The only problem is the curl function.

    Site B cannot be accessed. I have double checked. Both the root folder and wp-admin folder have no htaccess files now that I have deleted them.

    I have tried clearing the browser cache and also uploaded the original htaccess file to the root folder. But still getting the 403 forbidden error.

    Plugin Author AITpro

    (@aitpro)

    Where is Site A?
    Where is Site B?
    What is their relationship/hierarchy to each other?

    Examples:
    Site A is physically located here: /folder-path/
    Site B is physically located here: /folder-path/

    Site A is a WordPress single/standard site.
    Site B is a WordPress subdirectory/subfolder site.

    More detailed/extensive examples and info on structure/hierarchy/relationships:
    http://forum.ait-pro.com/forums/topic/htaccess-files-for-multiple-website-domains/

    Plugin Author AITpro

    (@aitpro)

    Also are any of these sites a “Giving WordPress Its Own Directory” (GWIOD) site type/installation?

    http://codex.wordpress.org/Giving_WordPress_Its_Own_Directory

    Thread Starter jadestaro

    (@jadestaro)

    Both sites are addon domains on the same shared hosting account.

    They have no relationship to each other.

    Each site have their own folder/root directory.

    Plugin Author AITpro

    (@aitpro)

    So your are saying that both sites are child sites installed one directory/folder below the hosting account root folder “/” (parent folder) and the parent folder does not have an htaccess file in it and does not have a website installed in it correct?

    / – hosting account root folder (parent) folder does not have a website installed in this folder and does not have an .htaccess file in this folder.
    /siteA/ – child site – side by side / child to child relationship to siteB
    /siteB/ – child site – side by side / child to child relationship to siteA

    Thread Starter jadestaro

    (@jadestaro)

    You are correct.

    The parent folder does not have any website installed and there is no .htaccess file.

    Site A is an addon domain. BPS is installed. Problem with cron job.

    Site B is an addon domain. Cannot access site. I have deleted both .htaccess files in the root folder and wp-admin folder.

    Plugin Author AITpro

    (@aitpro)

    If the BPS htaccess files are deleted then that means the cron problem is not being caused by BPS on Site A and the Site B problem is not being caused by BPS. There is nothing else in BPS that could cause these problems except for the root and wp-admin htaccess files. Delete the /wp-content/plugins/bulletproof-security/ plugin folders to confirm this. You will then need to contact your host support to find out what is causing these problems. 403 errors are a standard HTTP Status Response code and are not exclusive to only BPS.

    Thread Starter jadestaro

    (@jadestaro)

    I am installing the cron job for Site A (this issue is on another ticket).

    I have not tried to do the cron job for Site B yet because the site cannot be accessed at all, even after deleting both .htaccess files.

    Plugin Author AITpro

    (@aitpro)

    I was not aware that your site was already hacked prior to installing BPS. That changes everything. In this other thread that you posted you stated that your site was already hacked prior to installing BPS.
    https://wordpress.org/support/topic/cron-job-not-working-5?replies=9#post-6494179

    You need to assume the worst case scenario – your hosting account and websites are still compromised/hacked and that hacker files and/or code still exist somewhere in your hosting account folders and that hacker files or code have damaged the normal functionality of your website(s).

    Personally I would assume the sites and the entire hosting account are compromised and do all of the steps in this forum link: http://forum.ait-pro.com/forums/topic/wordpress-hacked-wordpress-hack-cleanup-wordpress-hack-repair/

    You want to be 100% sure that your hosting account and websites are not compromised, infected or have hacker files or code anywhere.

    Plugin Author AITpro

    (@aitpro)

    This thread has been resolved, but we still receive email notifications when a new post is created in a thread that has been resolved.

    Thread Start Date: 1-27-2015 to 1-28-2015
    Thread Resolved/Current Date: 2-4-2015
    Comments: The site and hosting account were compromised/hacked prior to installing BPS. See other related thread: https://wordpress.org/support/topic/cron-job-not-working-5?replies=22

    having made some changes i can not log in to the dashboard and my blog has dissappeared my web address michaeljosephcoats.com when you go to that address you get the following message
    You don’t have permission to access /wp/wp-admin/ on this server.
    Server unable to read htaccess file, denying access to be safe

    Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
    i have deleted wordpress then re installed but i can access my squeeze page and free content page but no blog page or be able to log in
    looked for ht access file using filezilla and its emppty

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Unable to login or access my website after activating BPS’ is closed to new replies.