• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Resolved Website not showing up

DigitalSplendid

Regular Pleskian
Server operating system version
18.0.53
Plesk version and microupdate number
Web Admin Se Edition
The website digitalsplendid.agency showing 403 error. I have renamed plugin and themes directory but that did not help.

1691155920652.png

1691155955240.png
 
The issue is resolved by turning Web application firewall mode off.
@DigitalSplendid

It is NOT recommended to turn off the Web Application Firewall.

As an alternative, one could use the (less restrictive) ruleset from Comodo.

As another alternative, one could tweak the OWASP rules - not the rules themselves, but add some exclusions, as @Maarten. pointed out.

However, in some cases, OWASP CRS has exclusion sets for specific programs - for instance, there is an exclusion set for WordPress.

I would suggest that you start with Comodo ruleset, keep track of the modsec_audit.log file and - if necessary - activate the more strict OWASP ruleset.

Kind regards....
 
Back
Top