# 403 error on XHR

**URL:** <https://kanboard.discourse.group/t/403-error-on-xhr/3087>\
**Category:** Installation Issues\
**Created:** [March 22, 2024, 1:28pm UTC](https://kanboard.discourse.group/t/403-error-on-xhr/3087 "2024-03-22T13:28:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cebe](https://avatars.discourse-cdn.com/v4/letter/c/7cd45c/32.png) [@cebe](https://kanboard.discourse.group/u/cebe)\
**Post date:** [March 22, 2024, 1:28pm UTC](https://kanboard.discourse.group/t/403-error-on-xhr/3087/1 "2024-03-22T13:28:52Z")

</div>

Hi, I chose Kanboard because it was open source and extremely lightweight. I installed it on an equally lightweight hosting service, using sqlite. However, most of the AJAX requests are blocked by a 403 error. I’ve seen that some people had this issue a few years ago and despite disabling mod\_security, it doesn’t change anything. Has there been a workaround for this problem since then?

---

<div class="post-metadata">

**Author:** ![alfredb](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/alfredb/32/1051_2.png) [@alfredb](https://kanboard.discourse.group/u/alfredb)\
**Post date:** [March 22, 2024, 2:20pm UTC](https://kanboard.discourse.group/t/403-error-on-xhr/3087/2 "2024-03-22T14:20:22Z")

</div>

> [@cebe](#):
>
> Has there been a workaround for this problem since then?

No, still the same, AFAIK.

> Kanboard is NOT compatible with Apache mod\_security.

---

<div class="post-metadata">

**Author:** ![cebe](https://avatars.discourse-cdn.com/v4/letter/c/7cd45c/32.png) [@cebe](https://kanboard.discourse.group/u/cebe)\
**Post date:** [March 22, 2024, 4:53pm UTC](https://kanboard.discourse.group/t/403-error-on-xhr/3087/3 "2024-03-22T16:53:56Z")

</div>

In fact, I hadn’t properly disabled mod\_security. It’s working now.