Error when saving wordpress setting

23 May 2018, 14:34
Hi Hugo,

I have been using wordpress with Hiawatha for 3 years and today I had my first problem..
I am trying to activate a plugin license key (mailpoet3) and when I hit save, I get

When I look at the log file I get|Wed 23 May 2018 12:14:21 +0000|URL contains forbidden characters

I sent the url in private message as it contain too much private data

Could you please help
VirtualHost {
Hostname =
WebsiteRoot = /usr/home/mydomain/public_html
StartFile = index.php
#UseLocalConfig = yes # Tell Hiawatha to use or ignore .hiawatha files

## Login
AccessLogfile = /usr/home/mydomain/public_html/logs/
ErrorLogfile = /usr/home/mydomain/public_html/logs/

## CGI
TimeForCGI = 60
UseFastCGI = PHP7-FPM-mmamats

## Header
CustomHeader = X-Frame-Options: sameorigin
CustomHeader = Vary: Accept-Encoding

## Error handling
#ErrorXSLTfile = /usr/local/etc/hiawatha/error.xslt
ErrorHandler = 404:/error.cgi

## Directory
UseDirectory = expire_1month, expire_2month

## Toolkit
UseToolkit = webmail, wordpress

## Security Settings Variables
# DenyBody = ^.*%3Cscript.*%3C%2Fscript%3E.*$ # If the request body matches the case insensitive regular expression, return a 403 Forbidden

# PreventCSRF = detect # Ignor all cookies sent by a browser when following an external link
# Can cause problems for wordpress
# Default = no

# PreventSQLi = detect # Prevent SQL-injection by detecting injections and denying the request via a 403, 404 or 441 response.
# NOT 100% guarantee, resource intensive!

# PreventXSS = block # Prevent cross-site scripting via the URL by replacing a less-then, greater-then, quote or double-quote in the URL with an underscore.


PS: I can send the url via email as it contain too much private data for the forum
Hugo Leisink
23 May 2018, 20:28
That's quite an insane URL you sent me. Try adding 'SecureURL = no' to your virual host configuration.
24 May 2018, 00:49
Hi Hugo,

The 403 error is gone but I now have a white screen.
btw is 'SecureURL = no' in the documentation? I couldn't find it
24 May 2018, 01:46
Fixed it..
Stupid wordpress plugin conflict
Not Hiawatha fault
This topic has been closed.