I’ll have a chat to the admin and ask him to check again.
Let’s presume that it is turned on though – what would I do to get the PM system working?
Your admin really needs to check with your hosting company as it is they who will impose mod_security on a server.
Mod_security works with pattern matching. It holds ‘patterns’ of known ‘attacks’ or security concerns and if it discerns a possible pattern match in a requested url then it will refuse to load it and issue a 404. It is a bane of every web developers life because there is no standard and one set of patterns with one user will not always match another users.
In our experience, hosting companies are usually quite willing to modify a pattern if it is causing a user grief. So if the PM url is triggering a match in some way – then mostly a host will remove that pattern for you or modify it in some way to avert the issue.
Ok, had some clarification on the situation – mod_security is definitely not turned on. What’s the next step?
Personally speaking I am out of ideas as we appear to have exhausted the WordPress side of things and am now, I suspect, into server/setup or environmental territory. Certainly in unique territory.
I will talk to Steve (Mr Papa) but we may need to have a greater degree of access to the system if we are going to or able to debug any further.
Yellow Swordfish said
I will talk to Steve (Mr Papa) but we may need to have a greater degree of access to the system if we are going to or able to debug any further.
Thanks. I have shell access, so I should be able to fetch whatever information it required.
not much… been gone few days, need more time to review the entire thread…
but have you discussed with your host why that url generates a 404? it really shouldnt? assuming no redirection is really happening… no caching plugins right? have you tried with that redirection plugin disabled?