Solved: Help needed with mod_security config files to prevent resource access

[skinnybloke]

One of my installed modules is giving the following error message when saving changes:

Forbidden - You don't have permission to access this resource.

If I turn off mod_security this works fine.

What do I need to add to the config file to allow the following URL to work?

https://www.domain.com/admin/index.php?controller=AdminModules&configure=ets_htmlbox&tab_module=administration&module_name=ets_htmlbox&edithtml_box=1&id_ets_hb_html_box=2&token=b1d12b27ca3a6b73c42080e5e4d3bcb0

Edited Monday at 01:38 PM by skinnybloke (see edit history)

[Prestashop Addict]

Hi, let's have a look at this post.

[skinnybloke]

I did see that post.

My logs are not showing anything around the time that this issue is occurring so I have not got an id

[Prestashop Addict]

Did you try to add backoffice to whitelist of mod_security settings?

[skinnybloke]

How do i do that?

[Prestashop Addict]

https://www.liquidweb.com/blog/whitelisting-in-modsec/

[skinnybloke]

OK - thanks - I'll take a look

[ST-THEMES]

Maybe there are some unexpected code in the content, such as js and iframe and so on.

[skinnybloke]

I run my site on CWP and I sorted my problem out out by following this video

 

It's 5 years out of date, and some tabs have changed, but there is enough information to achieve what I wanted to do.