403 forbidden when changing settings on WP Multisite non-main sites

I had the same problem – I found the rules in Apache modsecurity that include a set of exclusions for WordPress didn’t cover /network/site-settings.php, so I could do everything except edit sites in my multisite setup.
In the file /usr/share/modsecurity-crs/rules/REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf I added the following lines:

SecRule REQUEST_FILENAME "@endsWith /wp-admin/network/site-settings.php" \
   "id:9009999,\
   phase:1,\
   pass,\
   t:none,\
   nolog,\
   ctl:ruleRemoveById=941140,\
   ctl:ruleRemoveById=941160,\
   ctl:ruleRemoveById=942190,\
   ctl:ruleRemoveById=942240,\
   ctl:ruleRemoveById=942240,\
   ctl:ruleRemoveById=980130,\
   ctl:ruleRemoveById=949110"

…it’s my first experience of editing modsecurity rules, so there is probably a better way of doing it – but it worked.

Related Posts:

  1. Multisite Network Port Num Issues?
  2. How do I transition multiple installations to a single Multisite installation?
  3. WordPress Multisite with multiple domains using Nginx
  4. Multisite behind Varnish
  5. Generate WP-CLI @alias for each site on multisite
  6. Sub-directory blog on a sub-domain WordPress network site
  7. Broken image multisite
  8. Hide root site in Multisite install
  9. Subdomain and subdirectories together in one installation
  10. Alias domain to Multi-site installation in Apache
  11. Does WordPress MultiSite use separate MySql databases?
  12. WordPress with Lan and Wan Access?
  13. wp-config dynamic hostname in WP_HOME and WP_SITEURL
  14. What are good approaches to routing some urls to a second WordPress install?
  15. Multisite on single wordpress
  16. Problem with new Multisite Installation
  17. Error Message when logging into WordPress on Xampp
  18. Why the sites dropdown in multi-site installation is different from the list of sites when seen full page?
  19. How do I test my WordPress subdomains on AWS during migration?
  20. Unable to change blog language in multisite
  21. How to use WordPress Multisite With Different Domain Names?
  22. How To Add Custom Form Fields To The User Profile Page?
  23. Where are available Roles Defined in the wp_ database?
  24. restore_current_blog() vs switch_to_blog()
  25. Can i merge 2 new WP_Query($variable) ‘s?
  26. How to disable a network enabled plugin for just one site?
  27. How to reliably flush rewrite rules on multisite?
  28. Site Redirecting to wp-signup.php
  29. Moving a WP Multisite to a subdirectory
  30. Cookies in multisite where network sites have their own domain name
  31. Convert a Multisite WordPress install into a Single site
  32. WordPress MultiSite Active Directory integration and site privacy
  33. WordPress Job Interview Preparation
  34. How to add Custom Blog Options to new blog setup form?
  35. How can I trust switch_to_blog()?
  36. Remove the blog slug from WordPress Multisite root node
  37. Why are my roles not visible in a Multi-site/Network?
  38. Site admin in a network install can’t edit users?
  39. How to use same email for multiple users
  40. How to run an activation function when plugin is network activated on multisite?
  41. Specific upload folder for PDFs in custom Post type in WP multisite
  42. What is the correct way to map multiple domains in a WordPress 4.1 multisite install?
  43. Where can I find documentation on what characters are allowed in user names and why?
  44. How to migrate subsite from dev multisite to production multisite
  45. How can I un-reserve a pending username registration?
  46. How do I remove/delete an old super admin user?
  47. DB connection error after copying a WordPress Multisite instance to a second location
  48. Redirect Main Site to Subsite in Multisite WordPress
  49. Is there a is_user_logged_in() for multisite?
  50. Switching MultiSite installation from HTTP to HTTPS
  51. Allow user to select a theme to install when they signup
  52. Setting up a wordpress network with third level domains
  53. Get upload URL by blog ID in multisite
  54. What’s the difference between get_site_option and get_blog_option?
  55. Need help sorting “My Sites” Alphabetically
  56. How to delete post revisions?
  57. Create mobile site with same content just different theme
  58. Add additional Network constants to wp-config.php dynamically
  59. Multisite stuck at 1MB for max file size
  60. How to get blog name, when using WordPress Multisite
  61. What are options are there to implement a multi language site
  62. Switching primary site in WordPress Multisite
  63. Convert existing site to network
  64. Where is the robots.txt stored for a WordPress Multisite install?
  65. Settings API in Multisite – Missing update message
  66. Add WordPress MU Network Admin via Database
  67. How to get current site id? (WPMU)
  68. Multisite on Windows with wildcard subdomains
  69. Why is WordPress Multisite redirecting to wp-signup.php and how to fix it?
  70. Which asset URLs are acceptable in a “vanilla” MU install?
  71. $wpdb->base_prefix not get parent site prefix in multisite
  72. How to tell which database tables belongs to which multisite site
  73. what are pmxi tables? [closed]
  74. Using wp_insert_post() with Networking enabled
  75. Are nested subdomains possible with a subdomain multisite?
  76. Sharing Dynamic Sidebars across Multisite Blogs
  77. I want to develop locally with Multisite, then migrate each site to separate remote WP installs
  78. Password Reset for Users on a Multisite Subsite
  79. Anyone figured out how to use WordPress MultiSite with Domain Mapping & SSL?
  80. Can a multisite’s blogs be accessible from two different sub-domains?
  81. Querying posts from multiple sites in a network?
  82. Plugin for editing options on multisite?
  83. What do I need to do to convert my MultiSite from HTTP to HTTPS?
  84. is_front_page() malfunction?
  85. WP Multisite development with Mamp Pro and wildcard subdomains, not really working for me
  86. How to share WordPress core library
  87. How do I change the Multisite URL?
  88. Create site programmatically for WPMU
  89. Can upload doc and pdf but not ppt – not permitted for security reasons
  90. How Can I Centralize Content Usage and Approval in a WordPress Multi-Site installation
  91. WordPress Multisite: Adding actions to only one site
  92. WordPress Multisite allow site admin to add user without email confirmation
  93. Domain mapping (without plugin) in 4.5.x multisite?
  94. wordpress multisite, how to keep user on subdomain throughout registration process?
  95. How will self-hosted WordPress work with Google Page Speed Service?
  96. WordPress Multisite, NGINX and WordPress Subdirectory Install
  97. Multisite Domain Mapping with SSL
  98. get_user_meta() to Return User Meta Only for Current Blog in Multi Site
  99. Basic Multisite Question – Managing Content Centrally
  100. Can I set some default pages to be created on every creation of a new blog
Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)