url signature check exception

I have an extension for event management. 'SecurityCheck' is apparently trapping a signature with 'send.email' in it and rejecting it with a 403 forbidden. I am using free Securitycheck and I see no way to exclude that signature which makes the product unuseable. 

Hi RobWilkinson,

Sorry for the inconvenience.

Could you please send me a screenshot showing the relevant log entry? Also, could you copy the full content of the "Description" row and send it to me in a .txt file?

That will help me identify exactly what SecurityCheck is detecting and investigate the issue.

Thanks,
Jose

Hi again RobWilkinson,

Just a quick reminder that you can add the affected component as an exception to the rule that is triggering the 403 error.

You just need to identify the rule being triggered and then add the component as an exception to that rule under WAF Configuration → Filter Exceptions.

This should allow the component to work normally without disabling the rule entirely.

Best regards,
Jose

URL is :
/index.php/component/pickwick/?task=email.send&format=json
 

But that is only for the PRO product is it not? My question was, is it possible in the free product?

Regards,
Rob

Hi Rob,

Yes, of course it’s possible in the free product as well. You can check it yourself.

The difference is that the Pro version has a button that automatically adds the exceptions for you, whereas in the free version you need to add them manually. 

In your case, you need to add com_pickwick to the second-level filter, and that should solve your problem.

Regards,
Jose