WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Today I tried to access the admin panel for a basic Wordpress site. It has no plugins, and uses the default theme. I haven't modified any files. Any admin url returns an HTTP 406 "Not Acceptable". What's going on?

share|improve this question
Is there any .htaccess in /wp-admin? edit : 406 happens when the server cannot respond with the accept-header specified in the request. – JMau May 15 '13 at 19:54

I found this which might solve your problem:

<IfModule mod_security.c>
SecFilterEngine Off

This code goes in a file called .htaccess and must be uploaded in /wp-admin directory. This will disable mod_security which is a module in Apache2 activated by default but it can be problematic.

EDIT: @Rarst is right. It is just to see if the problem is here. You'd better not to leave this in /wp-admin directory after testing.

share|improve this answer
I would strongly recommend to ask hosting support to tweak mod_security rules, rather than trying to completely disable it. – Rarst May 15 '13 at 20:23
If it is a problem with mod_security you can use SecRuleRemoveById to remove the rules that are causing the issue. I wrote a blog post about it ages ago pablumfication.co.uk/2010/02/05/… but not sure how valid it is with the current version of mod_security and current version of WordPress. – Mark Davidson Aug 29 '13 at 10:23

I had the same exact problem this morning on ALL the sites hosted with the hosting company I use. Turned out that the hosting company was under a massive attack of some kind, and they were disabling all access for a little while until they could mitigate the issue. So, if someone else stumbles upon this issue and the above solution doesn't work, that could be another answer.

share|improve this answer

My solution is,m let your host provider know, they'll ask for your IP address, they will clear this address and all is fine again.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.