403 error from settings page

[rosell-dk]

See https://wordpress.org/support/topic/404-error-from-settings-page/

[rosell-dk]

I need help replicating the error. Or perhaps someone can kindly lend me access to a server where this problem occurs?

[rosell-dk]

Current theory is that it is triggered by some firewall. This theory can be tested by modifying wp-content/plugins/webp-express/lib/options/options-hooks.php

function webp_express_settings_page_content()
{
echo “testing “;
echo __DIR__ ;
//include __DIR__ . ‘/page.php’;
}

If the settings page show “testing”, we can rule out the firewall theory

[controlshiftgithub]

Have tried switching of Wordfence to test this. Unfortunately I still get a 403 error immediately after clicking Save Settings.

Tested modifying file permissions on htaccess file. Tested adding source as whitelisted query string on Wordfence Turned on debugging and found no mention of webp-express after clicking "Save settings"

[miryamfv]

Did anyone find a solution? let me know. I can let u login into my project if you need to

[shakyjake]

I don't have Wordfence installed so that can't be the cause. I've tried disabling ModSecurity too and that still didn't fix it. Hotlink Protection and Leech Protection are both disabled

Commenting out include_once 'converters.inc'; in lib\options\options\conversion-options\conversion-options.inc did get rid of the 403 error. It showed a blank page, but I suspect that's because I'd removed the lib\options\submit.php include directive from the options page hooks (in case sending partial option data broke the site).

This is on a client's production server so I'm afraid I can't really proceed further for fear of breaking things.

Tech specs: LAMP, Litespeed, PHP 7.2 (a few of the 403-havers in the wordpress.org topic linked in OP also mentioned Litespeed)