WordPress Simple Survey – 403 error

[bill]

Hi, AITpro.

I was having an issue with my website and I had a thought that the brute force login coding could be the issue. In brief, I have a quiz plugin on my website: http://accessscore.org/launch-access-score/ (please delete). That said, I have 25 questions in the quiz. But, when I select my response for the first question, the progress bar shows progress and the next button is made available to move on. But, this now works on my computer only. No one else is able to get pass the first question. Same with my shared wifi on my phone. I have two iPhones. one has wifi and the other stopped working after my ios7 update about a year ago. That said, the quiz works fine on my phone with the wifi…. and I can’t get pass the first question on the one without wifi.

The only thing that gives my computer exclusive access to certain elements of my site id the brute force code. I’m somewhat stuck however, because I attempted to delete that portion of the code from the .htaccess and it didn’t prove to be a difference maker. But, the quiz worked fine prior to… very strange.

Please let me know your thoughts when your schedule permits. Thanks,

Bill

[AITpro Admin]

I checked the link you posted above and the Plugin Firewall is blocking this plugin’s frontloading plugin script.  And also blocking cforms and jetpack.  post your Plugin Firewall whitelist rules so that I can see if you are missing whitelist rules or there is a mistake in the whitelist rules.  For future reference here are the BPS Pro troubleshooting steps so that you can isolate where the issue/problem is occurring:  http://forum.ait-pro.com/forums/topic/read-me-first-pro/#bps-pro-general-troubleshooting

Failed to load resource: the server responded with a status of 403 (Forbidden) http://accessscore.org/wp-content/plugins/wordpress-simple-survey/js/custom.js?ver=2.1.2
Failed to load resource: the server responded with a status of 403 (Forbidden) http://accessscore.org/wp-content/plugins/cforms/js/cforms.js
Failed to load resource: the server responded with a status of 403 (Forbidden) http://accessscore.org/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.9.1

[bill]

Thanks for looking into this for me… I’ve actually never set my whitelist. I’d normally just activate as is out of the box.

Where it reads: “Plugins Script/File Whitelist Text Area” its blank. And the payment provider checkboxes buttons were never checked… to prevent the blockage of the plugins you noted, do I enter the .js codes per that you included above into the “Plugins Script/File Whitelist Text Area” area?

 

[AITpro Admin]

Do you have BPS Pro 9.1 installed?  Are you running the Setup Wizards?  The Setup Wizards setup the Plugin Firewall and setup everything else automatically, with the exception of certain things that are setup with default settings (DB Monitor) and some things that should be a choice whether to use them or not (JTC, DB Backup).

[bill]

I’m running 9.0…. Definitely don’t recall running the wizard (kicking myself as I type — what an awesome feature…. that I totally overlooked). I’m certain I did it manually. Edit: Is it too late to run the setup wizard now?

[AITpro Admin]

Well you are not alone.  If someone did not update BPS Pro for several versions then they would have missed the Whats New notication about the Setup Wizard.  For new installations those folks see a link after activating BPS Pro that takes them to the Setup Wizard.

http://www.ait-pro.com/aitpro-blog/4827/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-6-0/
http://forum.ait-pro.com/forums/topic/bulletproof-security-pro-version-release-dates/

[bill]

Scratch that! I was in the wrong backend doing something else (in a different site) while corresponding with you… I’m running 5.9 on that particular site! (whitelist is still the same) How do I get the latest version…? my dashboard isn’t giving me the update notification.

[AITpro Admin]

In order not to overburden the API Server we only allow BPS Pro Dashboard updates for versions that are 6 months old.  If someone has not updated BPS Pro for 6 months then they will not be able to do a Dashboard upgrade/update since the API Server will ignore the upgrade/update check from that website.  The reason for this is it causes unnecessary resource usage for the API Server to perform an upgrade/update available check.  If someone has not updated BPS Pro for more than 6 months then the logic is the site is “abandoned” or “forgotten”.  The alternative that is available is on the S-Monitor page there is a BPS Pro upgrade/update email notification option.  This checks a static page and compares the version of BPS Pro you have installed to the version currently available.  You will get an email notification, but will still have to download the latest BPS Pro zip file from the Secure Download Area.

[bill]

Can’t say thank you enough. Running 9.1. Did the setup wizard. Survey plugin works perfectly. Genius. Simply genius.

[Author]

Posts