403 Forbidden while uploading image in admin

[Moebius]

First off all, thank you for great CMS/CMF, I think the best out there according to my preferences.

I have some issues while using image field type for uploading. I'm receiving 403 Forbidden, You don't have permission to access /processwire/backend/page/edit/ on this server.

Screenshot with firebug visualization:

I found some topics here (#1, #2), but none of them solve my issue.

phpinfo() does not indicate there is mod_security installed.

It also looks like getPhpFilesAjax from wire/core/WireUpload.php never executes and error pops somewhere before that.

It looks like this could be some hosthing restriction but I don't know what kind and how to address this problem to their support.

Can you please point me somwhere?

[pwired]

Hi Moebius,

Welcome to Processwire.

Please supply some more info e.g. are you using a cloud hosting ?

Does it show up when you drag and drop an image from your computer into the admin (image field) ?

What happens if you instead ftp upload the image ?

Turn on php debug and see what it comes up with.

https://processwire.com/talk/topic/1126-how-to-debug-use-the-error-log/#entry9954

[Moebius]

>Please supply some more info e.g. are you using a cloud hosting ?

I'm on shared hosting

>Does it show up when you drag and drop an image from your computer into the admin (image field) ?

error occures via drag and drop and classic old style browse button upload.

>What happens if you instead ftp upload the image ?

FTP works fine, I also set up 0777 on whole assets folder.

>Turn on php debug and see what it comes up with.

I did, but can't see nothing.

Thanks for your reply.

[pwired]

What does the error log on your hoster say ?

[Nico Knoll]

Have you changed some paths? Because the "backend" in the path shouldn't be there normally..

Which ProcessWire version are you using? If not dev try dev

Further description:
The problem is that the path doesn't exist in the htaccess file (because of "backend"). So processwire's htaccess doesn't process it. That's why your browser tries to open the actual directory which - of course - doesn't exists, too. (And maybe it's even blocked by htaccess too). So you're not allowed to access that path and get a 403.

If you try to open that path manually in your browser you should get a 403, too

[Soma]

backend seems to be the admin url NicO.

[Nico Knoll]

Oh I'm probably wrong then...

[Moebius]

>backend seems to be the admin url NicO.

yes, it is admin url

>What does the error log on your hoster say ?

nothing in error log.

:/

[Soma]

Then what is /processwire/ ? I guess you installed in a subdirectory? DefinitLy strange. Could have to do with that url. Something htaccess or permissions. I s saying you don't have access to something your currently on (page edit).

[Moebius]

Thank you for your replies, I'll try to ask hosting support.

I'll let you know if I got some answers.

[Moebius]

Problem solved, it was mod_security security after all.