I have an html form like so:
form accept-charset="utf-8" enctype="multipart/form-data" name="edit_orders" action="custom-quotes-request.php?action=edit&id=<?php echo $_GET['id']; ?>&type=update" method="post"
There's two form fields which send customer email address. Part of the POST data is encoded as:
Those two are just plain text fields. Whenever the email contains the string "rolex" I get a 403 Forbidden error. I've set file permissions and checked server configuration. I'm using a dedicated server and the support crew are quite knowledgeable on server management so I don't think there's some overlooking on their part (I think they just use a preconfigured server with CPanel).
The page does accept a GET request and returns output as appropriate. The problem only happens if the any of the email fields contain the "rolex" string and the request is POST.
So those work (the @ is urlencoded):
I've tried both form enctypes. I've also checked the error logs. I couldn't find any info at all on why this error occurs.