# Android app POST request returns HTTP 403 **URL:** \ **Category:** Hosting Support\ **Created:** [October 23, 2026, 4:25am UTC](https://forum.infinityfree.com/t/android-app-post-request-returns-http-403/121530 "2026-10-23T04:25:04Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![SafdarPKChat](https://forum.infinityfree.com/letter_avatar/safdarpkchat/32/5_5575768a8748004e209b776fc1b2916d.png) [@SafdarPKChat](https://forum.infinityfree.com/u/SafdarPKChat)\ **Post date:** [October 23, 2026, 4:25am UTC](https://forum.infinityfree.com/t/android-app-post-request-returns-http-403/121530/1 "2026-10-23T04:25:04Z")
### Website URL [https://pkchat.freedev.app/](https://pkchat.freedev.app/) ### Error Message HTTP 403 Forbidden — HTML error response when Android app sends a multipart POST request to the profile upload API. ### Other Information Hello, I am developing an Android chat app called PK Chat. My PHP API endpoint is: [https://pkchat.freedev.app/api/profile\_upload.php](https://pkchat.freedev.app/api/profile_upload.php) When I open this URL in Chrome, it returns “POST required”, as expected. However, when my Android app sends a multipart POST request with a Firebase ID token in the Authorization header, the server returns HTTP 403 with an HTML error response. Could you please help me determine whether this POST request is being blocked by the hosting security system? Thank you. ---
**Author:** ![Lemni](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/lemni/32/68303_2.png) [@Lemni](https://forum.infinityfree.com/u/Lemni)\ **Post date:** [October 23, 2026, 4:25am UTC](https://forum.infinityfree.com/t/android-app-post-request-returns-http-403/121530/2 "2026-10-23T04:25:15Z")
_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._ Yes, this is most likely the hosting security system. Every free hosting account has a check that only lets through clients that can run JavaScript and accept cookies. Android apps can’t do that, so the request is stopped before it reaches your PHP code. Chrome works because it’s a real browser. The article lists mobile apps and REST APIs as things that won’t work on free hosting, and 403 Forbidden as a common error for blocked requests. The article is here: > [@Browser Security System - Features and Limitations](https://forum.infinityfree.com/docs?topic=49353): > > InfinityFree uses a security system on all free hosting accounts to ensure your website is accessed by real web browsers, not bots or automated scripts. While this protects your site from malicious traffic, it can affect certain types of access. How the security system works The system checks that visitors can execute JavaScript and accept cookies: features that all modern web browsers support. This verification happens automatically and most website visitors will never notice it. You may occa… To check that it’s this and not something in your own code, look at the HTML body the app gets back with the 403. If it mentions `aes.js` or “This site requires Javascript to work”, the security system stopped it. If it’s something else, please post the body here. The article says this check can’t be turned off for a single URL or for an app. [Premium hosting](https://www.infinityfree.com/premium/) uses less restrictive protection that allows apps and APIs. ---
**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\ **Post date:** [October 23, 2026, 5:07am UTC](https://forum.infinityfree.com/t/android-app-post-request-returns-http-403/121530/3 "2026-10-23T05:07:06Z")
> [@SafdarPKChat](#): > > returns HTTP 403 Please read > [@Redirected to InfinityFree 403 Forbidden page](https://forum.infinityfree.com/t/redirected-to-infinityfree-403-forbidden-page/58664/1): > > Getting a 403 error means the server is refusing to show your webpage. Here are the most common causes and how to fix them: 1. Website Files Are in the Wrong Location The Issue: Your domain might be pointing to an empty or non-existent folder. How to Check: Log into your [InfinityFree client area](https://dash.infinityfree.com) Go to Accounts → [Select your account] → Domains → [Find your domain] → Manage Find the Directory Status card, and look at the Directory displayed there Understanding the folder structure: Your fi… Free hosting does not allow chat