403 Forbidden when saving General Settings

[RLS]

Hello,

There's a very old thread that is similar but without stating any solution. When I try to save changes in the General Settings tab in the Global Settings section of the Admin backend, I get the following error:

Forbidden
You don't have permission to access /admin/siteprefs.php on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

This error seems to occur only when submitting changes to the General Settings tab. Changes to any of the other settings under the other tabs within Global Settings save without issue.

I'm trying to setup CMSMS Version 1.12 on Apache (unkown version) running PHP 5.4.41 and mySQL 5.5.41. You can view the full phpinfo here:
http://www.togconsult.com/phpinfo.php

I installed CMSMS via cPanel using the Softaculous installer. The only additional module I've installed so far is the Ace Editor. Other than this addon module, it is the default install without any modifications.

Here is the CMSMS System Information:

----------------------------------------------
Cms Version: 1.12

Installed Modules:
CMSMailer: 5.2.2
CMSPrinting: 1.0.5
FileManager: 1.4.5
MenuManager: 1.8.6
MicroTiny: 1.2.9
ModuleManager: 1.5.8
News: 2.15.1
Search: 1.7.12
ThemeManager: 1.1.8
AceEditor: 1.0

Config Information:
php_memory_limit:
process_whole_template:
max_upload_size: 128000000
url_rewriting: none
page_extension:
query_var: page
image_manipulation_prog: GD
auto_alias_content: true
locale:
default_encoding: utf-8
admin_encoding: utf-8
set_names: true

Php Information:
phpversion: 5.4.41
md5_function: On (True)
gd_version: 2
tempnam_function: On (True)
magic_quotes_runtime: Off (False)
E_STRICT: 2048
E_DEPRECATED: 0
memory_limit: 168M
max_execution_time: 60
output_buffering: On
safe_mode: Off (False)
file_uploads: On (True)
post_max_size: 32M
upload_max_filesize: 128M
session_save_path: /tmp (0700)
session_use_cookies: On (True)
xml_function: On (True)
xmlreader_class: On (True)

Server Information:
Server Api: cgi-fcgi
Server Db Type: MySQL (mysqli)
Server Db Version: 5.5.41
Server Db Grants: Found a "GRANT ALL" statement that appears to be suitable
Server Time Diff: No filesystem time difference found
----------------------------------------------

I'd appreciate any help you can provide.

Thanks,
- Robert

[calguy1000]

Most 403 errors in the admin section are the result of an over zealous mod_security implementation. CMSMS does not play well with arbitrary firewall rules.

Ask your host to disable mod_security for your site(s).