After logging in as admin on /wp-admin, and redirection to the admin backend overview (dashboard), the website shows an error 403 forbidden ("You don't have permission to access this resource."). I.e., I cannot access the admin dashboard.
Error 403 Forbidden will consistently reappear on reloading /wp-admin.
Navigating to the frontend homepage (hidden link) also shows a Error 403 Forbidden.
When I navigate to a product detail page (e.g. /product/product-a) after having logged in, the error instantly disappears. I can now also access the admin dashboard.
Reloading /wp-admin after the initial login several times by smashing F5 will allow me to suddenly access /wp-admin. This, however, only happens after an arbitrary amount of seconds (not a certain amount of refreshes!).
The error also appears when logging in the browser's inkognito/private mode.
The error does not appear when WPML is deactivated. Leaving WPML active as sole plugin reproduces the error.
The WP error debug log does not contain any meaningful output related to this problem.
Regenerating .htaccess did not seem to solve the problem.
Switching to a different PHP version did not seem to solve the problem.
The error appeared in timely connection to us switching the hosting server, but I cannot recall whether this was actually related/the cause.
Languages: English (English )Spanish (Español )Italian (Italiano )
Timezone: Europe/Rome (GMT+02:00)
Before your ticket is assigned to one of my colleagues, please allow me to walk you through some initial debugging steps. This will help speed up the support process.
Can you add this code to your active theme's functions.php file:
function wpmlsupp_1706_reset_wpml_capabilities() {
if ( function_exists( 'icl_enable_capabilities' ) ) {
icl_enable_capabilities();
}
}
add_action( 'shutdown', 'wpmlsupp_1706_reset_wpml_capabilities' );
Then open a page on the front-end and/or back-end and check if the problem disappears.
If it doesn't, then please enable the debug.log as shown in the guide i'm linking here, and send me the file if it's created after you get a 403 error. you can upload it into any platform you like such as google drive or wetransfer: https://wpml.org/documentation/support/debugging-wpml/
The log was created as per your guide:
- Activated the debugging in wp-config.php
- Reproduced the error.
- Deactivated debugging again.
In contrast to my original post, the last line of the debug.log may be relevant:
[18-Oct-2023 14:48:05 UTC] PHP Warning: Cannot modify header information - headers already sent in /var/www/vhosts/(hidden)/httpdocs/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-language-per-domain-sso.php on line 123
Taking a look at your site I can see that you use a different domain per language, along with the warning in your error log and the recent hosting move I highly recommend reviewing the following documentation and ensuring everything is still set up per our documentation.
Provide this documentation to your hosting support as well to ensure this from their side as well.
Does your current hosting environment use Cloudflare or a caching system such as redis? If possible check for potential errors that would cause the 403.
This is coming from the hosting/domain side and not caused due to a bug in WPML's code.
From the WPML side, WPML needs to be able to send data cross-domain via POST or GET method in order for login data to be passed to other language domains and for you to stay logged in or not get a 403 error.
stefanieW-5 confirmed that the issue was resolved on 2023-10-21 07:49:17.
This ticket is now closed. If you're a WPML client and need related help, please open a new support ticket.
