When I try t add an API-Key in the settings and press on save error 403 occurs.
Today I must see, that it is not possible to upload some fonts in the font book:
Whether it results in Error 500 or in 'Max size limit exceedes' (11kb!) Only 3 files could be uploaded.
They all where prefered as described in the doc. 3 files I could upload.
Pages can be saved.
Sincerely
Hello Peter Klinke
,
We apologize for the inconvenience you're facing with the API Key addition and font uploads. Upon reviewing the situation, it appears that the issue may be related to a server-side firewall blocking certain changes.
Could you kindly confirm whether there is a firewall enabled on your server? This would help us to identify if the firewall is causing the 403 error when saving the API key and preventing the font uploads.
Thank you for your understanding and cooperation.
Sincerely
Hello,
yes I think so, every hosting should have firewall. Working with an joomla component and saving inside joomla should not make trouble with the firewall.
My own site on same hosting company does not have problems saving the setting.
Sincerely
Please follow this documentation https://www.joomshaper.com/documentation/sp-page-builder/troubleshooting#i-cant-save-page-blocked-by-cors-policy
I don't have a problem saving pages, but rather saving the settings - only there.
The suggested solutions don't work, everything is fine.
I won't change the settings in the firewall because of a page builder, btw I have no access to these firewall settings.
The problem must be somewhere else.
Joomla 4.4.9
Pagebuilder 5.4.2
PHP 8.2.6
As I remember, I already had this problem longer time before again on another site.
One of your colleaques solved this, Toufiq I mean?
Unfortunately I do not find the enty in the history
Sincerely
Hello Peter Klinke,
Thank you for sharing the details about the issue. I understand that saving settings in the Page Builder is causing trouble and that changing firewall settings isn’t an option.
Would it be possible to get hosting access? This would help us check the server setup and logs to find what might be causing the problem.
Looking forward to your reply.
Sincerely
I am in contact with hoster.
Copied the site to another hosting results in same error!
Really firewall prob?
Apologies for the inconvenience. May I take a backup of your website to test and troubleshoot the issue in our local environment?
Please let me know if this is okay, and I will ensure the process is handled securely.
Well, that is no problem, I create an akeeba backup?
Certainly, I will handle it. I was just seeking confirmation.
Hello Peter Klinke,
Apologies for the inconvenience caused earlier. I am pleased to inform you that the issue has now been resolved.
The problem was traced back to some code in the .htaccess file, which has been corrected. Kindly check if everything is functioning as expected on your end.
If you encounter any further issues or require additional assistance, please do not hesitate to reach out.
Best regards
Hello Atick,
I tried now again but unfortunately the issue still exists.
Last hours I am checking with the hoster. The Firewall was not active for some time. While this time the issue is gone.
Result: Only not active firewall allows savings the settings, no exceptions affect the problem.
I cannot understand, what saving settings in database causes in firewall!
We have excluded the id 336142 in firewall roules but no change.
My hoster has no idea anymore now. Error in hidden area.
Thank you for your update.
It appears that when saving settings, the system communicates with external services, such as the Google Fonts API or the SP Page Builder license validation server. The firewall on your server seems to be blocking these outgoing requests, which could be causing the issue.
I recommend reviewing the firewall configuration to allow these specific requests.
Let me know if you need any additional details or assistance.
Best regards
Hi,
I have been communicating with my hoster for a while now. According to their specialists, the log file shows that an injection is taking place, which is not allowed.
I can only disable the firewall, but that is not in the customer's interest.
So only solution is changing the hoster or used pagebuilder?
Apologies for the inconvenience. It appears that the administrator access has been changed. Could you kindly provide me with the updated credentials so I can proceed with the necessary checks?
Looking forward to your response.
Best regards
I changed back to the known account.
I can not access your site.
I have commented out this entry in htaccess and site works again:
<IfModule mod_security2.c>
SecRuleRemoveById 336142</IfModule>
and now?? No help for my site?
Apologies for the inconvenience. Unfortunately, at this time, the only available solution is to disable the firewall.