Hopefully this might help prevent unnecessary hair loss ...

If you are running the PHP version of Ecommerce Templates (any version), then you may perhaps occassionally encounter this error message when updating Product, Category or Email Message content upon clicking the "Submit" button.

Access Forbidden, HTTP Error 403

Any any changes you made will not be saved.
You are more likely to get this error if some type of code has been entered in CK Editor "Source" view, such as an embedded <iframe> YouTube video code snippet </iframe>.
Or in Email Message templates, entering <style type="text/css"> list of CSS rules </style> might trigger this Access Forbidden message.

CAUSE (in cPanel > Security)
ModSecurity has detected what it believes to be a "Cross-site Scripting (XSS) Attack" which is a vulnerability that enables attackers to inject client-side scripts into web pages viewed by other users.
This is however a False Positive.

SOLUTION
(1 temporary) Disable the ModSecurity module in cPanel. Make your changes. Submit. Update successful. Re-enable ModSecurity.
(2 permanent) Lodge a Support Ticket with your Web Host requesting that they disable that over sensitive ModSecurity Rule ID on your domain. The Rule ID number which triggered the false positive will appear in server Error Logs.

Gary

Funny you should post this. It just recently happened to one of my customers. Never really did identify the exact "snippet" that was causing the problem, but ServeLink was most helpful in resolving the issue.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com