forbidden you dont have permission to access wp login php on this server

forbidden you dont have permission to access wp login php on this server  using -'wordpress,permissions'

I have one problem with all my WordPress's sites. I can access in all and navigate in the posts, pages and other. But when I go to wp-login.php I view the form and put user and password.

And when I clicking access goes here:

  You don't have permission to access /blog/wp-login.php on this server.

I have permissions in folder 755 and files 644, and I check all if i can, any help?


asked Oct 19, 2015 by vijayshukla80
0 votes

8 Answers

0 votes

The solution is to add this to the beginning of your .htaccess

Order Deny,Allow
Deny from all
Allow from all

It's because many hosts were under attack, using the wordpress from their clients.

answered Oct 19, 2015 by patilkiran.101
0 votes

I had this same problem, and after temporarily deleting all my .htaccess files, then trying to modify them as suggested, and making sure all my files and folder permissions were set to 777, I still couldn't get it to work. I don't know why I couldn't access the file, but I was able to create a new file and access it no problem. So what I did was create a new file in /wp-admin/ called temp.php and pasted all the code from install.php into it. This allowed me to access the file. The only other thing I had to do was edit the code so that the form submitted to temp.php instead of install.php. After that, I could finish the install and everything worked.

answered Oct 19, 2015 by vijayshukla80
0 votes

Sometimes if you are using some simple login info like this: username: 'admin' and pass: 'admin', the hosting is seeing you as a potential Brute Force Attack through WP login file, and blocks you IP address or that particularly file.

I had that issue with ixwebhosting and just got that info from their support guy. They must unban your IP in this situation. And you must change your WP admin login info to something more secure.

That solved my problem.

answered Oct 19, 2015 by kotmus2002
0 votes

Make sure the following lines are not in your wp.config

define( 'FORCE_SSL_LOGIN', true );
define( 'FORCE_SSL_ADMIN', true );
define( 'DISALLOW_FILE_EDIT', true );

I got locked out after deactivating iThemes security plugin

answered Oct 19, 2015 by mca.agarwal
0 votes

I had a similar error, which was fixed by adding:

Options FollowSymLinks

... in the apps/[app-name]/conf/httpd-app.conf file. This is because, in my case, an .htaccess file wants to use rewrite rules, that are not allowed with FollowSymLinks AND SymLinksIfOwnerMatch turned off.

If your conf file already has a line with Options ..., you can just add FollowSymLinks to the list of options. You could end up with something like this:

Options Indexes MultiViews FollowSymLinks
answered Oct 19, 2015 by okesh.badhiye
0 votes

This should work :

The instructions says that you add a separate .htaccess containing the lines above to the wp-admin folder - and leave the main .htaccess, in the root, alone.

if that don't help , you can try this:

copy the .htaccess file as is from the wp-admin and placed it in the root folder and bingo! It should work ! if you face new error after this let us know.

for reference you can look here as well:

Check using this:

SecFilterEngine Off
SecFilterScanPOST Off

answered Oct 19, 2015 by atulpariharmca
0 votes

If you are using the iThemes Security plugin (former Better WP security) please refer to the answer provided by Mikeys4u.

Also, there is a similar thread related to this plugin on the WordPress support:

Make sure you backup your database before trying any of the solutions.

answered Oct 19, 2015 by param.oncemore
0 votes

As said previously add this

    Order Deny,Allow
    Deny from all
    Allow from all

to the begining of your main .htaccess file and it will work

answered Oct 19, 2015 by gauravsinghal83