BulletProof Security Forum

Since you are getting a 404 error and not a 403 error than most likely BPS is not causing the issue/problem.  To determine if BPS is causing the problem do these steps.

1. On the Security Modes page, click the Root Folder BulletProof Mode Deactivate button. See Custom Code Note if doing this step works.
2. On the Security Modes page, click the wp-admin Folder BulletProof Mode Deactivate button. See Custom Code Note if doing this step works.
3. Test your plugin or theme.

Try creating a Skip/Bypass rule for this plugin as shown below.  Copy and paste this .htaccess code below to Your Current Root htaccess File file using the built-in BPS File Editor.  As of BPS Pro 5.1.5 and BPS free .46.9 you can add personal plugin fixes to Custom Code to save them permanently. Copy this .htaccess code to the Custom Code CUSTOM CODE PLUGIN FIXES: text box, save your changes, go to the BPS Security Modes page and click the Root Folder BulletProof Mode Activate button.

# Download Monitor skip/bypass rule
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/add-the-plugin-folder-name-here/ [NC]
RewriteRule . - [S=13]

I assume you would add the Download Monitor coding here in your root .htaccess file (you probably do not need to add Options Symlinks):

RewriteEngine On
RewriteBase /
RewriteRule ^download/([^/]+)$ *your wp-content dir*/plugins/download-monitor/download.php?id=$1 [L]
RewriteRule ^index\.php$ - [L]

I had one person email me with a 403 error message when trying to download a PDF. I cannot replicate it on multiple browsers, logged in/out, but she copied and pasted the BPS 403 error page, so I know it came from BPS. Is there anything you can think of that would cause this under variable circumstances?

Here is the plugin:  http://wordpress.org/extend/plugins/download-monitor/
I have tested this on the front end and cannot duplicate the error, but I’ve gotten several emails from people just recently (I believe this is something that changed in the last update possibly) that have copied/pasted the BPS 403 error pages into the email to let us know about it.
I wish I had more details, it’s really frustrating when I myself, cannot duplicate the problem people are having. Is there a way to have BPS skip this plugin somehow, at least temporarily?

The download url looks like this: http://www.address.com/wp-content/plugins/download-monitor/download.php?id=1

Ok going by the errors in the Error log then yep a simple plugin skip/bypass rule should work.

Copy and paste this .htaccess code below to Your Current Root htaccess File using the built-in BPS File Editor.  The S= # is very important.  It is an .htaccess Skip rule.  The skip rules are in descending order S=12, S=11, S=10, etc and this number order is very important.  If you add a plugin fix above Skip rule #11 (S=11) then your new skip rule will be S=12.  If you add another skip rule above S=12 it will be S=13.  As of BPS Pro 5.1.5 and BPS free .46.9 you can add personal plugin fixes to Custom Code to save them permanently. If after testing this skip/bypass rule directly in your root .htaccess file works then copy this .htaccess code to the Custom Code CUSTOM CODE PLUGIN FIXES: text box, Click the Save Root Custom Code button, Go to the BPS Security Modes page and click the Root Folder BulletProof Mode Activate button.

# Download Manager skip/bypass rule
RewriteCond %{REQUEST_URI} ^/wp-content/plugins/download-monitor/ [NC]
RewriteRule . - [S=13]

Also from what the previous person posted the Download Manager plugin has its own custom .htaccess code that you need to add to the root .htaccess file.  I will be testing this plugin in a little while.

I have tested this plugin.

Chose to upload a pdf and chose the option to Force Download.  I did not need to alter or modify anything and the download worked fine.  I do not see any conflicts or that BPS is blocking anything in this plugin using these settings, but it is possible that choosing some of the other configuration options such as creating a specified Download directory could cause an issue.  I tried using this option and it does not make any sense.  the only hint is this – Directory (relative paths only): 

I tried several different combinations of relative paths and none of them worked so I could not test this.

In testing when I did not use this option then the PDF opened in the Browser instead of being downloaded of course.