I have magento connected with with a 3rd API, I receive a webhook notification response from the api but it cannot process any file and generate this 403 Forbidden error regarding some access rights. I've changed the magento folder to read and write access but the issue still the same.

<title>403 Forbidden</title>
<p>You don't have permission to access /magento1.9/app/code/local/Ns/Thorleif/Helper/Data.php
on this server.</p>

The issue was the .htaccess in \magento1.9\app having the value Deny from all

  • But I see a new message in my admin dashboard "Your web server is configured incorrectly. As a result, configuration files with sensitive information are accessible from the outside. Please contact your hosting provider." . There is a way to hide it? – javaTodev Jun 23 '17 at 15:17

You are most likely running into a mod_security rule which is returning the 403. Contact your hosting provider and have them update the rule to allow the 3rd party modification to run.

  • I have it in localhost, and I use the ngrok to comunicate with webhooks API – javaTodev Jun 22 '17 at 15:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.