Website Shows “403 Forbidden” or “ModSecurity Blocked”
This error usually happens when ModSecurity detects suspicious activity and blocks the request.
1. Identify ModSecurity rule
Open System Info & Files → Error Log and look for:
[mod_security] Access denied ...
2. Clear browser cache
403 errors are often cached.
3. Disable rule (request support)
If a rule blocks a safe action (false positive), contact support with:
- Your domain
- Exact URL triggering the error
- ModSecurity rule ID
4. Fix file permission issues
Ensure your folders are set to 755 and files to 644.
5. Check .htaccess for restrictions
Remove these if present:
Deny from all
6. Firewall block
If your IP was blocked, disconnect and reconnect internet or use your phone hotspot.