BulletProof Security Forum

On the BPS Quarantine Page (

mydomain.com/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fquarantine%2Fquarantine.php#bps-tabs-2

) when I click the Restore File checkbox of a root’s .htaccess it leads to a BPS 403 Error like the following:

mydomail.com 403 Forbidden Error

If you arrived here due to a search or clicking on a link click your Browser’s back button to return to the previous page. Thank you.

IP Address: my-ip-address 

BPS Pro Plugin 403 Error Page

Now I can’t use the Restore File option, while clicking the View File and Delete File doesn’t have this problem, it’s fine.

Here is my secure log:

[403 POST Request: July 13, 2021 - 10:11 pm]
BPS Pro: 15.6
WP: 5.7.2
Event Code: WPADMIN-SBR
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: my-ip-address
Host Name:
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: my-ip-address, my-cloudflare-proxy-ip
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: POST
HTTP_REFERER: mydomain.com/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fquarantine%2Fquarantine.php
REQUEST_URI: /wp-admin/admin.php?page=bulletproof-security/admin/quarantine/quarantine.php
QUERY_STRING: page=bulletproof-security/admin/quarantine/quarantine.php
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
REQUEST BODY: BPS Security Log option set to: Do Not Log POST Request Body Data

I’ve followed the answer on this page (https://forum.ait-pro.com/forums/topic/security-log-event-codes/page/4/) ,

add the either of the below 2 codes in Custom Code —> wp-admin htaccess File Custom Code—-> 3. CUSTOM CODE WPADMIN PLUGIN/FILE SKIP RULES ——> then in Secure Modes —> Active wp-admin Folder BulletProof Mode (WBM)

Note:  The skip rule must be [S=2] because it will be written to your wp-admin .htaccess file above skip / bypass rule [S=1].  If you have other wp-admin skip/bypass rules already then either combine them or add this skip/bypass rule separately above the other rules and change the skip #.  Example:  If you already have skip #’s 2 and 3 then this rule would be skip rule #4.
# admin-ajax.php skip/bypass rule
RewriteCond %{REQUEST_URI} (admin-ajax\.php) [NC]
RewriteRule . - [S=2]
or
RewriteCond %{REQUEST_URI} page=bulletproof-security(.*) [NC]
RewriteRule . - [S=2]

Neither these two codes works.

Can you help me with that? let me know if you need wp-admin login.