# Tutor LMS quiz start returns 403 Forbidden — OpenResty after account suspension

**URL:** <https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493>\
**Category:** Hosting Support\
**Created:** [October 21, 2026, 5:24pm UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493 "2026-10-21T17:24:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yoser8511](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/yoser8511/32/68335_2.png) [@Yoser8511](https://forum.infinityfree.com/u/Yoser8511)\
**Post date:** [October 21, 2026, 5:24pm UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493/1 "2026-10-21T17:24:12Z")

</div>

### Website URL

[https://tmlsoftware.ct.ws/aula/](https://tmlsoftware.ct.ws/aula/)

### Error Message

403 Forbidden — openresty

Tutor LMS quiz start returns HTTP 403 Forbidden after my InfinityFree hosting account was suspended and subsequently reactivated.

The quiz page loads correctly, but when I click “Start Quiz”, the server returns a 403 Forbidden error. Other parts of my WordPress website are working normally.

The problem started after my hosting account was suspended and then reactivated.

### Other Information

Hello InfinityFree Support,

I run a WordPress website using Tutor LMS to manage an online course.

After my hosting account was suspended and subsequently reactivated, I started experiencing HTTP 403 Forbidden errors when attempting to start quizzes.

The affected page is:  
[https://tmlsoftware.ct.ws/aula/cursos/la-ia-en-tu-sector-herramientas-riesgos-y-oportunidades/cuestionario/📝-la-ia-como-asistente-profesional/](https://tmlsoftware.ct.ws/aula/cursos/la-ia-en-tu-sector-herramientas-riesgos-y-oportunidades/cuestionario/%f0%9f%93%9d-la-ia-como-asistente-profesional/)

The quiz introduction page loads, but clicking “Start Quiz” triggers a 403 Forbidden — openresty error.

Other website pages are working normally, and I have existing quiz attempts that I need to preserve.

Could you please investigate whether a server-side security rule, request filter, or restriction related to my account is blocking the requests required by Tutor LMS?

Please let me know if you need any additional information to identify the blocked request.

Thank you for your assistance.

---

<div class="post-metadata">

**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\
**Post date:** [October 21, 2026, 5:24pm UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493/2 "2026-10-21T17:24:12Z")

</div>

Welcome to the InfinityFree community forum! Good to have you here.

- Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
- Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
- AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
- Solving an issue is a joint effort. Try the suggestions you get and report back what happened.

---

<div class="post-metadata">

**Author:** ![Lemni](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/lemni/32/68303_2.png) [@Lemni](https://forum.infinityfree.com/u/Lemni)\
**Post date:** [October 21, 2026, 5:24pm UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493/3 "2026-10-21T17:24:29Z")

</div>

_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._

Can you open your browser’s developer tools (F12, then the Network tab), click “Start Quiz”, and tell me which request comes back as 403? The request URL, its method (GET or POST) and the hostname it goes to would be enough. I need this because “403 Forbidden — openresty” doesn’t say which request was refused, and Tutor LMS sends a few behind that button.

The hostname matters because of how our browser security system works. It checks that visitors can run JavaScript and keep cookies. It’s mandatory on free hosting, and it blocks requests from other domains (CORS) and from tools or scripts. Background requests made by a page to its own domain are fine. So a 403 on a request to a different hostname than the page you’re on would point at this. A 403 on a request to the same hostname would be something else.

Here’s the article describing the security system:

> [@Browser Security System - Features and Limitations](https://forum.infinityfree.com/t/browser-security-system-features-and-limitations/49353):
>
> InfinityFree uses a security system on all free hosting accounts to ensure your website is accessed by real web browsers, not bots or automated scripts. While this protects your site from malicious traffic, it can affect certain types of access. How the security system works The system checks that visitors can execute JavaScript and accept cookies: features that all modern web browsers support. This verification happens automatically and most website visitors will never notice it. You may occa…

Also, which address are you using when you click the button: `tmlsoftware.ct.ws`, or one of your other domains?

---

<div class="post-metadata">

**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\
**Post date:** [October 22, 2026, 3:19am UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493/4 "2026-10-22T03:19:39Z")

</div>

Status stated here

> **[Websites are returning 403 errors from OpenResty on POST requests |...](https://status.infinityfree.com/issues/2026-10-21-403-errors/?u=kangjl)**
>
> Identified - We have received confirmation from iFastNet about this issue.
> Earlier today, a critical update to PHP was released that fixes two severe security issues. These issues could cause serious harm on our hosting if exploited.
> Our hosting runs...

---

<div class="post-metadata">

**Author:** ![KangJL](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/kangjl/32/12130_2.png) [@KangJL](https://forum.infinityfree.com/u/KangJL)\
**Post date:** [October 22, 2026, 3:19am UTC](https://forum.infinityfree.com/t/tutor-lms-quiz-start-returns-403-forbidden-openresty-after-account-suspension/121493/5 "2026-10-22T03:19:47Z")

</div>


