BulletProof Security Forum

Hi AIT PRO,

I’ve been using your free BPS plugin on many sites for years. I haven’t had a site hacked since using it, so I am a big fan and using it on all client sites as well as my own. Today, I was alerted to an issue on a client site that has a shop plugin – The Shopping Cart Plugin from Tribulant . We started receiving a 403 page when someone tries to put an item in the cart. The item actually gets put into the cart, but to the customer, they receive the 403 page and think they cannot purchase the item. I searched the forums but didn’t find anything about the plugin except this, which doesn’t apply to my issue (I tried it anyway)

http://forum.ait-pro.com/forums/topic/tribulant-shopping-cart-unable-to-save-options-403-error/

So, I followed the troubleshooting instructions to add the URI to the custom code as [S=13] to the following section:

CUSTOM CODE PLUGIN/THEME SKIP/BYPASS RULES: Add personal plugin/theme skip/bypass rules here

However, I must be doing something wrong because I am still getting the 403 message. It is happening on the production site as well as the development/testing site. I am doing these tests on the development site: http://www1.smseafoodmarket.com

Here’s the log entry: I have a bunch of them and they are all the same.

[403 GET / HEAD Request: April 9, 2015 - 3:54 pm]
Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
Solution: N/A - Hacker/Spammer Blocked/Forbidden
REMOTE_ADDR: 8.25.32.186
Host Name: 8.25.32.186
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP: 
HTTP_FORWARDED: 
HTTP_X_FORWARDED_FOR: 
HTTP_X_CLUSTER_CLIENT_IP: 
REQUEST_METHOD: GET
HTTP_REFERER: http://xxxxxxx/product/gift-cards-2/
REQUEST_URI: /shop/shopping-cart?wpcoupdated=true&wpcomessage=Product%20added.%20%3Ca%20href=%22http://www1.smseafoodmarket.com/shop/shopping-cart/%22%3EView%20Cart%20→%3C/a%3E
QUERY_STRING: 
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.82 Safari/537.36

If you need a login id and password, I can PM you one. I’d really like to get this fixed ASAPas it is preventing sales on this site. I don’t want to remove the plugin because I just reviewed all of the other top security plugins but they all seem to have major issues. And, not having anything is just not an option.

Can you give me the plugin Skip/Bypass rule for this?

Thanks, Todd