403 Error for Global.ini.php

Support & Bugs
1

This query gives me a 403 error. GET …wp-content/plugins/matomo/app/config/global.ini.php 403 Forbidden

This is the system report. Any help appreciated. Ive just updated Wordpress and Matomo and this error has surfaced. Thank you in advance.

			  # Matomo
  • Matomo Plugin Version: 4.14.2
  • Config exists and is writable.: Yes (“$abs_path/wp-content/uploads/matomo/config/config.ini.php” )
  • JS Tracker exists and is writable.: Yes (“$abs_path/wp-content/uploads/matomo/matomo.js” )
  • Plugin directories: Yes ([{“pluginsPathAbsolute”:“$abs_path/wp-content/plugins/matomo/plugins”,“webrootDirRelativeToMatomo”:“…/”}])
  • Tmp directory writable: Yes ($abs_path/wp-content/cache/matomo)
  • Matomo Version: 4.14.2
  • Matomo Blog idSite: 1
  • Matomo Install Version: 4.3.0 (Install date: 2021-06-09 21:10:06)
  • Upgrades outstanding: No
  • Upgrade in progress: No

Endpoints

  • Matomo JavaScript Tracker URL: ($site_url/wp-content/uploads/matomo/matomo.js)
  • Matomo JavaScript Tracker - WP Rest API: ($site_url/wp-json/matomo/v1/hit/)
  • Matomo HTTP Tracking API: ($site_url/wp-content/plugins/matomo/app/matomo.php)
  • Matomo HTTP Tracking API - WP Rest API: ($site_url/wp-json/matomo/v1/hit/)

Crons

  • Server time: 2023-07-21 18:00:48
  • Blog time: 2023-07-21 21:00:48 (Below dates are shown in blog timezone)
  • Sync users & sites: Next run: 2023-07-21 21:10:05 (9 min 17s) ( Last started: 2023-07-20 21:10:14 (-23 hours 50 min). Last ended: 2023-07-20 21:10:14 (-23 hours 50 min). Interval: daily)
  • Archive: Next run: 2023-07-21 21:10:05 (9 min 17s) ( Last started: 2023-07-21 20:10:22 (-50 min 26s). Last ended: 2023-07-21 20:10:22 (-50 min 26s). Interval: hourly)
  • Update GeoIP DB: Next run: 2023-07-29 21:10:05 (8 days 0 hours) ( Last started: 2023-06-29 21:10:06 (-21 days 23 hours). Last ended: 2023-06-29 21:10:07 (-21 days 23 hours). Interval: matomo_monthly)

Mandatory checks

  • PHP version >= 7.2.5: ok
  • PDO extension: ok
  • PDO\MYSQL extension: ok
  • MYSQLI extension: ok
  • Other required extensions: ok
  • Required functions: ok
  • Required PHP configuration (php.ini): ok
  • Directories with write access: ok
  • Directories with write access for Tag Manager: ok

Optional checks

  • 64-bit PHP Binary: ok
  • Tracker status: ok
  • Memory limit: ok
  • Time zone: ok
  • Open URL: ok
  • GD > 2.x + FreeType (graphics): ok
  • Other extensions: ok
  • Other functions: ok
  • Filesystem: ok
  • Last Successful Archiving Completion: ok
  • Database abilities: ok
  • Max Packet Size: ok
  • Geolocation: ok
  • Update over HTTPS: ok
  • Supports Async Archiving: No
  • Location provider ID: geoip2php
  • Location provider available: Yes
  • Location provider working: Yes
  • Had visit in last 5 days: Yes
  • Matomo URL: Yes ($site_url/wp-content/plugins/matomo/app/)

Matomo Settings

  • Track mode: default
  • Track codeposition: footer
  • Track api endpoint: default
  • Track js endpoint: default
  • Version history: 4.14.2, 4.3.0
  • Core version: 4.14.2
  • Last tracking settings update: 1623313112
  • Last settings update: 1623313112
  • Track noscript: Yes
  • Track content: visible
  • Track ecommerce: No
  • Track search: Yes
  • Track 404: Yes
  • Track feed: Yes
  • Track heartbeat: 30

Logs

  • None:

WordPress

  • Home URL: $site_url
  • Site URL: $site_url
  • WordPress Version: 6.2.2
  • Number of blogs: 1
  • Multisite Enabled: No
  • Network Enabled: No
  • WP_DEBUG: No
  • WP_DEBUG_DISPLAY: Yes
  • WP_DEBUG_LOG: No
  • DISABLE_WP_CRON: -
  • FORCE_SSL_ADMIN: Yes
  • WP_CACHE: Yes
  • CONCATENATE_SCRIPTS: -
  • COMPRESS_SCRIPTS: -
  • COMPRESS_CSS: -
  • ENFORCE_GZIP: -
  • WP_LOCAL_DEV: -
  • WP_CONTENT_URL: $site_url/wp-content
  • WP_CONTENT_DIR: $abs_path/wp-content
  • UPLOADS: -
  • BLOGUPLOADDIR: -
  • DIEONDBERROR: -
  • WPLANG:
  • ALTERNATE_WP_CRON: -
  • WP_CRON_LOCK_TIMEOUT: 60
  • WP_DISABLE_FATAL_ERROR_HANDLER: -
  • MATOMO_SUPPORT_ASYNC_ARCHIVING: -
  • MATOMO_TRIGGER_BROWSER_ARCHIVING: -
  • MATOMO_ENABLE_TAG_MANAGER: -
  • MATOMO_SUPPRESS_DB_ERRORS: -
  • MATOMO_ENABLE_AUTO_UPGRADE: -
  • MATOMO_DEBUG: -
  • MATOMO_SAFE_MODE: -
  • MATOMO_GLOBAL_UPLOAD_DIR: -
  • MATOMO_LOGIN_REDIRECT: -
  • Permalink Structure: /%postname%/
  • Possibly uses symlink: No
  • Upload base url: $site_url/wp-content/uploads
  • Upload base dir: $abs_path/wp-content/uploads
  • Upload url: $site_url/wp-content/uploads
  • Custom upload_path:
  • Custom upload_url_path:
  • Compatible content directory: Yes

WordPress Plugins

  • Activity Log: 2.5.2
  • Add Admin CSS: 2.0.1
  • Advanced Custom Fields: Image Aspect Ratio Crop: 3.0.1
  • All-in-One WP Migration: 7.17 (Network enabled)
  • All 404 Redirect to Homepage: 1.18
  • All In One WP Security: 5.2.1 (Network enabled)
  • amr shortcode any widget: 3.7
  • Arrow Custom Feed for Twitter: 1.5.3
  • Async JavaScript: 2.20.02.27
  • Broken Link Checker: 1.11.8
  • Bulk Delete: 6.0.2
  • Bulk Move: 1.3.0
  • Calculated Fields Form: 1.0.376
  • Category SEO Meta Tags: 2.5
  • Child Theme Configurator: 2.5.9
  • Code Embed: 2.3.2
  • Code Snippets: 2.13.3
  • Comment Reply Notification: 1.4
  • Content Views: 2.3.4
  • Cron Jobs: 1.2.7
  • Custom Post Type UI: 1.6.2
  • Custom Twitter Feeds: 1.3
  • Disable All WordPress Updates: 1.6.7
  • Disable plugins / themes updates: 1.0.2
  • Download Plugin: 1.5.1
  • Duplicate Post: 3.2.3
  • Dynamic Widgets: 1.5.16
  • Enable Shortcodes inside Widgets,Comments and Experts: 1.0.0
  • Featured Images in RSS for Mailchimp & Other Email: 1.5.4
  • G Meta Keywords: 1.4
  • Google XML Sitemaps: 4.1.0
  • Head & Footer Code: 1.0.9.1
  • Head, Footer and Post Injections: 3.1.3
  • Head Meta Data: 20190902
  • HTML in Category Descriptions: 1.2.1.1
  • JM Twitter Cards: 11.1.10
  • Last Modified Timestamp: 1.0.5
  • Lazy Load for Videos: 2.7.4
  • Lazy Load Optimizer: 1.4.5
  • List Categories: 0.2
  • Matomo Analytics - Ethical Stats. Powerful Insights.: 4.14.2
  • Merge + Minify + Refresh: 1.8.12
  • Meta Generator and Version Info Remover: 6.0.2
  • Ninja Forms: 3.6.28
  • No Category Base (WPML): 1.3
  • PHP Code Widget: 2.4
  • PHP Everywhere: 2.0.2
  • Podamibe Simple Footer Widget Area: 2.0.8
  • Post Category Filter: 1.6.1
  • Post Layout: 2.2.5
  • Posts By Tag: 3.2.1
  • Post Snippets: 3.0.11
  • Post Type Switcher: 3.2.0
  • Query Monitor: 3.6.6
  • Recent Posts Widget Extended: 0.9.9.7
  • Redirection: 4.3.3
  • Regenerate Thumbnails: 2.2.4
  • RSS Multi Importer: 3.15
  • Search & Filter: 1.2.11
  • SEO Smart Links: 3.0.1
  • Simple 301 Redirects: 1.07
  • Simple Image Widget: 4.4.2
  • Simply Exclude: 2.0.6.6
  • Smush: 3.4.2
  • SSL Insecure Content Fixer: 2.7.2
  • Sticky Menu (or Anything!) on Scroll: 2.31
  • Subscribe to Comments Reloaded: 220725
  • Table Sorter: 2.2
  • The SEO Framework: 4.0.1
  • TP Cookies - EU Cookie Law Compliance: 1.0.3
  • Ultimate Addons for Gutenberg: 1.19.0
  • Video Playlist for YouTube: 4.0
  • Video Thumbnails: 2.12.3
  • Wordfence Security: 7.4.14 (Network enabled)
  • WordPress.com Stats: 1.8.6
  • WordPress Charts: 0.7.0
  • WordPress RSS Feed Retriever: 1.6.5
  • WP-Optimize - Clean, Compress, Cache: 3.1.7
  • WPCode Lite: 2.0.8.1
  • WP Crontrol: 1.7.1
  • WPeMatico: 2.6.6
  • WP Fastest Cache: 0.8.9.7
  • WPForms Lite: 1.8.2.3
  • WP Old Post Date Remover: 3.0.7
  • WP Rollback: 1.7.3
  • WP RSS Aggregator: 4.17.10
  • Yoast SEO: 12.1
  • Active Plugins: 44 (query-monitor acf-image-aspect-ratio-crop add-admin-css all-in-one-wp-security-and-firewall allow-html-in-category-descriptions amr-shortcode-any-widget async-javascript calculated-fields-form child-theme-configurator content-views-query-and-display-post-page disable-wordpress-updates dynamic-widgets enable-shortcodes-inside-widgetscomments-and-experts featured-images-for-rss-feeds g-meta-keywords head-footer-code header-footer insert-headers-and-footers jm-twitter-cards last-modified-timestamp lazy-load-for-videos lazy-load-optimizer leira-cron-jobs list-categories matomo meta-generator-and-version-info-remover ninja-forms no-category-base-wpml php-code-widget post-snippets posts-by-tag recent-posts-widget-extended redirection simple-embed-code simply-exclude ssl-insecure-content-fixer sticky-menu-or-anything-on-scroll subscribe-to-comments-reloaded table-sorter video-thumbnails wordfence wordpress-seo wp-disable-updates wp-optimize)
  • Theme: newsphere (newsphere-child)

Server

  • Server Info: Apache
  • Apache AddHandler support: Supported
  • PHP OS: Linux
  • PHP Version: 7.4.33
  • PHP SAPI: cgi-fcgi
  • PHP Binary Name: /home/httpd/cgi-bin/php74.bin.fcgi
  • PHP Maxmind DB extension: Not loaded
  • PHP Error Reporting: After bootstrap: 0
  • PHP Found Binary: /usr/bin/php -q
  • Timezone: UTC
  • WP timezone: Europe/Athens
  • Locale: en_US
  • User Locale: en_US
  • Memory Limit: 384M (At least 128MB recommended. Depending on your traffic 256MB or more may be needed.)
  • WP Memory Limit: 40M
  • WP Max Memory Limit: 384M
  • Timezone version: 2023.3
  • Time: 1689962449
  • Max Execution Time: 240
  • Max Post Size: 100M
  • Max Upload Size: 104857600
  • Max Input Vars: 1000
  • Disabled PHP functions: No
  • zlib.output_compression is off: Yes
  • Curl Version: 7.74.0, OpenSSL/1.1.1n
  • Suhosin installed: No

PHP cli

  • PHP cli Version: 7.4.33
  • MySQLi support: ok

Database

  • MySQL Version: 5.5.5
  • Mysqli Connect: Yes
  • Force MySQL over Mysqli: No
  • DB Prefix: o24hg4_
  • DB CHARSET: utf8
  • DB COLLATE:
  • SHOW ERRORS: No
  • SUPPRESS ERRORS: No
  • Uses Socket: No
  • Uses IPv6: No
  • Matomo tables found: 119
  • DB tables exist: Yes
  • Matomo users found: 1
  • Matomo sites found: 1
  • Required permissions: OK

Browser

  • Browser: (Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.115)
  • Warning Browser Compatibility: Yes (Because you are using MS Edge browser, you may see a warning like “This site has been reported as unsafe” from “Microsoft Defender SmartScreen” when you view the Matomo Reporting, Admin or Tag Manager page. This is a false alert and you can safely ignore this warning by clicking on the icon next to the URL (in the address bar) and choosing either “Report as safe” (preferred) or “Show unsafe content”. We are hoping to get this false warning removed in the future.)
  • Language: en-us,en
2

I have a query monitor installed. In says this for one of the 403s. (There are two 403s for the same page. )

403 Forbidden-

  • HTTP API Transport: curl
  • DNS Resolution Time: 0.0002
  • Connection Time: 0.0002
  • Transfer Start Time (TTFB): 0.0067
  • Response Size: 199 B
  • Response Content Type: text/html; charset=iso-8859-1
  • IP Address: XXX.XX.30.32

In the “caller” column it gives this

  1. Piwik\P\W\WordPress->onSendHttpRequestBy()
    wp-content/plugins/matomo/plugins/WordPress/WordPress.php:269

  2. Piwik\EventDispatcher->postEvent()
    wp-content/plugins/matomo/app/core/EventDispatcher.php:147

  3. Piwik\Piwik::postEvent()
    wp-content/plugins/matomo/app/core/Piwik.php:871

  4. Piwik\Http::sendHttpRequestBy()
    wp-content/plugins/matomo/app/core/Http.php:318

  5. Piwik\Http::sendHttpRequest()
    wp-content/plugins/matomo/app/core/Http.php:105

  6. Piwik\P\D\D\AbstractPrivateDirectories->isAccessible()
    wp-content/plugins/matomo/app/plugins/Diagnostics/Diagnostic/AbstractPrivateDirectories.php:101

  7. Piwik\P\D\D\RequiredPrivateDirectories->isGlobalConfigIniAccessible()
    wp-content/plugins/matomo/app/plugins/Diagnostics/Diagnostic/RequiredPrivateDirectories.php:49

  8. Piwik\P\D\D\ServerInformational->execute()
    wp-content/plugins/matomo/app/plugins/Diagnostics/Diagnostic/ServerInformational.php:43

  9. Piwik\P\D\DiagnosticService->run()
    wp-content/plugins/matomo/app/plugins/Diagnostics/DiagnosticService.php:68

  10. Piwik\P\D\DiagnosticService->runDiagnostics()
    wp-content/plugins/matomo/app/plugins/Diagnostics/DiagnosticService.php:55

  11. WpMatomo\A\SystemReport->get_matomo_info()
    wp-content/plugins/matomo/classes/WpMatomo/Admin/SystemReport.php:510

  12. WpMatomo\A\SystemReport->get_error_tables()
    wp-content/plugins/matomo/classes/WpMatomo/Admin/SystemReport.php:247

  13. WpMatomo\A\SystemReport->errors_present()
    wp-content/plugins/matomo/classes/WpMatomo/Admin/SystemReport.php:288

  14. WpMatomo\A\Menu->add_menu()
    wp-content/plugins/matomo/classes/WpMatomo/Admin/Menu.php:183

  15. do_action('admin_menu')
    wp-includes/plugin.php:517

3

The query monitor classes the error under “HTTP API Calls”