403 forbidden when changing settings on WP Multisite non-main sites

I had the same problem – I found the rules in Apache modsecurity that include a set of exclusions for WordPress didn’t cover /network/site-settings.php, so I could do everything except edit sites in my multisite setup.
In the file /usr/share/modsecurity-crs/rules/REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf I added the following lines:

SecRule REQUEST_FILENAME "@endsWith /wp-admin/network/site-settings.php" \
   "id:9009999,\
   phase:1,\
   pass,\
   t:none,\
   nolog,\
   ctl:ruleRemoveById=941140,\
   ctl:ruleRemoveById=941160,\
   ctl:ruleRemoveById=942190,\
   ctl:ruleRemoveById=942240,\
   ctl:ruleRemoveById=942240,\
   ctl:ruleRemoveById=980130,\
   ctl:ruleRemoveById=949110"

…it’s my first experience of editing modsecurity rules, so there is probably a better way of doing it – but it worked.

Related Posts:

  1. Multisite Network Port Num Issues?
  2. How do I transition multiple installations to a single Multisite installation?
  3. WordPress Multisite with multiple domains using Nginx
  4. Multisite behind Varnish
  5. Generate WP-CLI @alias for each site on multisite
  6. Sub-directory blog on a sub-domain WordPress network site
  7. Broken image multisite
  8. Hide root site in Multisite install
  9. Subdomain and subdirectories together in one installation
  10. Alias domain to Multi-site installation in Apache
  11. Does WordPress MultiSite use separate MySql databases?
  12. WordPress with Lan and Wan Access?
  13. wp-config dynamic hostname in WP_HOME and WP_SITEURL
  14. What are good approaches to routing some urls to a second WordPress install?
  15. Multisite on single wordpress
  16. Problem with new Multisite Installation
  17. Error Message when logging into WordPress on Xampp
  18. Why the sites dropdown in multi-site installation is different from the list of sites when seen full page?
  19. Programmatically create blogs with dummy content on a WPMU site
  20. How to individually set WP_DEBUG on a sub-directory multisite?
  21. Create multiple subdomains for multi-site from a database
  22. How to map a specific multi-site blog to a folder?
  23. 4 single sites VS multisite wordpress
  24. multisite htaccess 301 redirects
  25. using 1 form shortcode (si or cf7) for all multisite sites [closed]
  26. How to manage multiple domain with different languages on each domain with single wordpress installation?
  27. Is there any fundamental difference in developing a wordpress multi-network site?
  28. merging two multisites
  29. Redirect loop (only for multisite network admin)
  30. favicon and multi site
  31. Deleting a user in multisite
  32. Recover from failed multisite conversion
  33. Cookie nonce is invalid – Multisite
  34. Multisite setup on VVV with bedrock
  35. Trouble with switch_to_blog()
  36. How can I delete a user from entire multisite nework
  37. Using A Shared/Common Theme Across Multiple Sites
  38. Activate Child Theme with Codex
  39. Multisite Network Localisation
  40. Can set_transient() be used in multi-site?
  41. What would you recommend for hosting 10+ individual wordpress websites?
  42. Redirect only posts to New Domain
  43. Image problem – Multisite image upload broken
  44. add_rewrite_rule on multisite doesn’t work
  45. web.config breaks the themes for sub-directory multisite
  46. Add a user to a specific blog when they register?
  47. Redirect & permalink problems after moving multisite to a new server
  48. Different use for WordPress Multisite
  49. Multisite User Sync Question about blog authorship
  50. WP-CLI cron on multisite using WP-Toolkit “succeded”, but callback not executed
  51. WordPress multisite suddenly malfunctioning
  52. Cannot use pre_set_site_transient_update_themes from within a theme in multisite
  53. Login problems on multisite installation with different domains
  54. Multisite wordpress config on multidomain
  55. Is this a job for WP MultiSite with domain mapping plugin?
  56. FeedWordPress duplicated posts problem
  57. WordPress MU subdomain vhost
  58. Domain mapping with Multisite links are wrong
  59. Install multisite wordpress on a subdomain and map to top level domains
  60. Get latest blog post from another multisite blog
  61. How do I stop exactly one blog from network ever setting cookies?
  62. How to use different domains subdomains in WP multisite? [duplicate]
  63. Delete all user’s meta without knowing all the ‘key’
  64. Is this possible? A multisite with “www.example.com/en/blog/” and “www.example.com/cn/blog/” (two directories deep)
  65. How to modify wp_config file for set up subdirectory?
  66. Sharing users across multiple sites, each on their own database
  67. Activation Account Email
  68. Stylesheet and JS linking error in WP multisite nested path
  69. Can I run multiple blogs from my local machine
  70. How to automatically translate plugin using translate.wordpress.org
  71. May I do multiple micro-sites with different themes in a single wordpress without subdirectory nor subdomain separation?
  72. Multisite htaccess file causing segfault (Segmentation fault 11)
  73. How do I export a single site in a multisite content without using a plugin? The default WP export does not catch all
  74. Multisite Smtp Server
  75. Images uploaded after adding multisite do not get loaded in any domain of the multisite network
  76. Migrating from domain mapping plugin to native domain mapping
  77. When hooking wp-cron to system
  78. WordPress network, add extra directory to subsite urls
  79. Register a user only to the root blog – WP Multisite
  80. Update Same Contents on every Page
  81. WooCommerce API Returns 401
  82. Define default settings for new sites on multisite network with mu-plugin
  83. Multisite + wp_mail – Route Via Site Conditionally
  84. WordPress automatic Login on other page?
  85. Multisite: How to bypass wpmu_signup_user_notification and add my own notification logic?
  86. MU domain mapping without using a plugin
  87. Multisite authorization error 401
  88. Multisite Demo Data for New Site
  89. How create a multisite setup with “phantom” accounts and passwords?
  90. is there a if multisite have posts function?
  91. Multisite – mix sites that use subdomains with sites that use paths
  92. How to apply specific plugins to affect all sites (Multisite Network)
  93. Primary site file uploads failing, subdirectory subsites upload fine
  94. Subdomain Wp-Admin Not Found
  95. Pick your brain on wp-config.php if statement for multisite
  96. first load of the page gives 404 error
  97. WordPress Multisite restict user access
  98. WordPress Multisites
  99. The wpmu_blogs_columns filter is not working
  100. Map WP Multisite blog.example.com to anotherdomain.com/blog?