WiscWeb - WordPress UW Theme - 403 Forbidden Error
The 403 error page message is an indicator of a few things that could be wrong. Use the tips below to troubleshoot the cause of the error.
The issue states "403 Error: Permission Required."
Issue
Users will see this error if one of three things occur:
- You were trying to login to WiscWeb
- You were trying to submit a web form
- You were attempting to upload a file to your Media Library
Resolution
I was trying to login...
If you are off campus or not connected to a campus network when you receive this error, it is an indicator that you need to connect through WiscVPN. If you already have this installed on your computer, simply login and then try accessing WiscWeb. If you do not have the campus VPN installed on your computer, please download and connect:
- Download WiscVPN (aka Global Protect client from Palo Alto)
- When connecting, make sure to set the portal to
uwmadison.vpn.wisc.edu
More information about how to login can be found in WiscWeb - WordPress UW Theme - Logging into Your Site.
If you were logged in to WiscVPN when you received this error, the issue could be that your browser is in a redirect loop and is getting blocked by Modsecurity. A good test is to see if you can log in via a different browser or in an incognito window. If you can log in with one of these methods, then the following steps will help clear the issue from the browser session that was erroring:
- Close your browser session completely to stop the redirect loop
- Wait 15 minutes
- Try logging in again
I was submitting a form...
If you were submitting a form when you saw this error, something you entered into the form is being flagged as a potential hacking attempt. Review the suggestions below and then press the back button in your browser to to adjust and re-submit your form.
- Make sure you are not copying and pasting in form content from an external source like Microsoft Word. Try manually typing in the content or using a text-only editor like Notepad (make sure you are using plain text). Externally copied content can carry invisible code that triggers Modsecurity.
- Omit special characters from your form fields (examples: percentages %, double quotes ” “, single quotes ‘ ‘, and pipes |). Modsecurity flags these characters. Try using standard letters/words rather than these special characters.
- Omit mathematical expressions from your form fields. (example: “1 and 1-1”). Modsecurity flags these characters. Try rephrasing input that includes numbers and logical key words.
- Review the fields in the form. Certain form fields can trigger the Modsecurity response when paired with special characters. For example, parentheses ( ) do not work well when placed in a radio button or checkbox list. If items 1-3 are not related to your issue, the problem could be the form itself.
If you continue to see this error and are unable to submit your form, please contact the support email for the site containing the form. The contact information will be listed at the bottom of the form website. Please include a screenshot of the content you were attempting to submit in the form, if possible – this will help with troubleshooting.
I was uploading a file to the Media Library...
If you were attempting to upload a file to the Media Library when this happened, the issue is likely that there is an "illegal character" in the file name. If your file name contains special characters (e.g. %&@#$'), please remove them and save the file under a new name. Then, try re-uploading.