This document may help CALS Web Service users who are troubleshooting a 403 error message in their for their CALS-hosted website. The 403 browser error could indicate one of several things depending on the last action that the user was attempting upon seeing the error. Use the tips below to troubleshoot the potential cause of the error.
The browser error states one of the following:
– 403 FORBIDDEN: You don’t have permission to access this resource.
– 403 Error: Permission Required.
– FORBIDDEN
Action being taken by user
Users will see this error if one of the following things occur:
- You were trying to login to the CALS-hosting website
- You were trying to read/review a website/webpage
- You were trying to submit a web form on the site
- You were attempting to upload a file to your Media Library
Resolution
I was trying to login…
If you are off campus or not connected to a campus network when you receive this error, it is an indicator that you need to connect through WiscVPN. If you already have this installed on your computer, simply connect to WiscVPN and then try accessing the website again. If you do not have the campus VPN installed on your computer, then follow these instructions for downloading and installing WiscVPN.
Please read our other help document for more information about how to login to your CALS Web Service website.
I was trying to read/review a website/webpage
If you were just attempting to access a website or webpage when seeing this issue, there’s a chance that you need to clear your browser cache and cookies.
These instructions will help walk you through this process, based on the browser you are using: Clearing Browser Cache and Cookies
If that does not fix your issue, please email websupport@cals.wisc.edu and include the following info:
- Date/time that you saw the error
- Your IP address (go to https://whatismyipaddress.com/ and send the IPv4 address listed)
I was submitting a form…
If you were submitting a form when you saw this error, something you entered into the form is being flagged as a potential security issue. Review the suggestions below and then press the back button in your browser to to adjust and re-submit your form.
- Make sure you are not copying and pasting in form content from an external source like Microsoft Word. Try manually typing in the content or using a text-only editor like Notepad (make sure you are using plain text). Externally copied content can carry invisible code that triggers Modsecurity.
- Omit special characters from your form fields (examples: percentages %, double quotes ” “, single quotes ‘ ‘, and pipes |). Modsecurity flags these characters. Try using standard letters/words rather than these special characters.
- Omit mathematical expressions from your form fields. (example: “1 and 1-1”). Modsecurity flags these characters. Try rephrasing input that includes numbers and logical key words.
- Review the fields in the form. Certain form fields can trigger the Modsecurity response when paired with special characters. For example, parentheses ( ) do not work well when placed in a radio button or checkbox list. If items 1-3 are not related to your issue, the problem could be the form itself.
- Confirm that you did not use any carriage returns in any of the fields. This is the equivalent of starting a new line in the text or pressing the Return or Enter key on the keyboard. On the back-end, this adds code that appears as a Windows Command Injection. If removed, you should be able to submit the form without issue.
If you continue to see this error and are unable to submit your form, please contact the support email for the site containing the form. The contact information will be listed at the bottom of the form website (in the website footer). Please include a screenshot of the content you were attempting to submit in the form, if possible – this will help with troubleshooting.
I was uploading a file to the Media Library…
If you were attempting to upload a file to the Media Library when this happened, the issue is likely that there is an “illegal character” in the file name. If your file name contains special characters (e.g. %&@#$’), please remove them and save the file under a new name. Then, try re-uploading.