I just inherited a site with K2, which I've never used before. I'm superuser, and when I login for the first time, I can delete K2 comment(s). The 2nd time I try, even after logging out/in, I get a 403/Forbidden, and since there's not a 403 page, it's followed by a 404.

The failure is on a POST to /administrator/index.php?option=com_k2&view=comments, but I don't see anything more helpful in the logs.

I have run Akeeba Admin to fix permissions.

Any clues on where to look?

Hello Andrew,

Make sure your K2 user and K2 user group have the appropriate permissions to modify comments on the frontend.

On the backend by default, since you are a Super User you won't have an issue.

Sorry, I should have directly said the problem is in the backend, but the URL is for /administrator.

I just checked, and K2 parameter permissions are all Allowed (Superuser). All system permissions are default from the install.

Taking for granted that the server setup is correct (sessions, caching etc)..

Have you altered the default permissions in any way?

Any custom extensions or security restrictions (blocking of certain URLs)?

Is this happening in any K2 sites, or is this your first?

Finally which version of Joomla! and K2 are you using?

First K2 site, I inherited it from the previous developer, who is not longer available for contact.

No permissions changes anywhere that I can see, no security addons.

J3.2.1, K2 v2.6.7

Can you try with the 2.6.8 DEV build? It fiixes several issues for Joomla! 3.2.1

getk2.org/assets/get/

Installed 2.6.8, no change, I still get a 403/Forbidden when trying to delete K2 comments from the backend.

I am sorry but I can replicate the issue.

I am using Joomla! 3.2.1 with the 2.6.8 DEV build. I can delete comments, log in and out and resume deleting and editing.

Are you using any other extensions as well? Are you sure this is not related to your server setup?

I don't think that it is a K2 problem, but a config issue somewhere. As I said, I inherited this site, so I'm not totally familiar with everything yet. I did install Akeeba Admin and ran Fix Permissions. I have also updated php.ini to clear a upload file size & missing /tmp declaration (/tmp was configured in Joomla). I've also checked .htaccess and it looks default with mod_rewrite enabled.

There are no updates to discover and no warnings left.

The error occurs when I'm at:
/administrator/index.php?option=com_k2&view=comments
then check a comment box, then Delete. The error log says the 403.shtml access was referred by:
/administrator/index.php?option=com_k2&view=comments

Extra components are Akeeba Admin & Backup, K2, Simple Image Gallery Pro & RS Form Pro. Unfortunately those are paid extensions & I don't have access to their memberships. I don't think RS Form Pro is used anywhere, but the gallery is heavily used.

I see a couple extra plugins, one for GoogleAnalytics and another for image display. Also JCK Editor.

The site is running a Rockettheme/Gantry template, which I'm quite familiar with.

Simple Image Gallery Pro will not produce errors of that sort (trust me on this).
RS Form Pro and Akeeba Admin & Backup are widely used extensions so I don't think these are to blame either.

You can try disabling plugins one by one to see which is causing the issue.

I am having this same problem with the latest version of Joomla and the latest version of K2. The problem is that K2 is not logging in when the admins log into the site. So we need to find a way to get k2 to log in when the user logs in.

@Douglas Musgrove

K2 does not have it's own login system. Once user signs in in Joomla! the only thing that K2 checks is his permissions. So as i wrote in the previous three topics you posted the same message turn on system debugging to see where the error is raised from. Also stop posting duplicate messages.

FYI my client moved the site to a new host and the problem disappeared :dry:

Obviously this was a server setup issue. If you are using Nginx as a web server then you need to apply the correct rewrite rules docs.joomla.org/Nginx .