Problem:
The BPS wp-admin .htaccess file blocks the Authorize.net call to admin-ajax.php
Solution:
Copy the admin-ajax.php skip/bypass rule below to this BPS wp-admin Custom Code text box: 3. CUSTOM CODE WPADMIN PLUGIN/FILE SKIP RULES
Click the Save wp-admin Custom Code button.
Go to the BPS Setup Wizard page and run the Pre-installation Wizard and Setup Wizard. For BPS free run the Setup Wizard.
Note: Other plugins that use the Authorize.net Gateway may also need this solution.
# Skip/bypass rule for the admin-ajax.php file
RewriteCond %{REQUEST_URI} (admin-ajax\.php) [NC]
RewriteRule . - [S=3]
Security Log Entry:
[403 GET Request: September 11, 2020 - 1:50 pm]
BPS Pro: 14.7
WP: 5.5.1
Event Code: WPADMIN-SBR
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: GDPR Compliance On
Host Name: 136.33.226.195
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP: GDPR Compliance On
HTTP_FORWARDED: GDPR Compliance On
HTTP_X_FORWARDED_FOR: GDPR Compliance On
HTTP_X_CLUSTER_CLIENT_IP: GDPR Compliance On
REQUEST_METHOD: GET
HTTP_REFERER: https://www.example.com/checkout-2/
REQUEST_URI: /wp-admin/admin-ajax.php?action=wc_authorize_net_cim_credit_card_log_js_data&security=xxxxxxxxcd&type=request&data%5BauthData%5D%5BclientKey%5D=&data%5BauthData%5D%5BapiLoginID%5D=xxxxxxxxx&data%5BcardData%5D%5BcardNumber%5D=*************&data%5BcardData%5D%5Bmonth%5D=1&data%5BcardData%5D%5Byear%5D=2021&data%5BcardData%5D%5BcardCode%5D=***
QUERY_STRING: action=wc_authorize_net_cim_credit_card_log_js_data&security=xxxxxxxxcd&type=request&data%5BauthData%5D%5BclientKey%5D=&data%5BauthData%5D%5BapiLoginID%5D=xxxxxxxxx&data%5BcardData%5D%5BcardNumber%5D=*************&data%5BcardData%5D%5Bmonth%5D=1&data%5BcardData%5D%5Byear%5D=2021&data%5BcardData%5D%5BcardCode%5D=***
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
.
