Hi, thanks for the reply, but I think I solved it with the help of this post:
http://www.primothemes.com/forums/viewtopic.php?f=4&t=14666A note to others who have this problem, when you contact hostgator, and first they'll give a couple of excuses for why they can't do what you ask, I think mainly because the hostgator representative doesn't understand what the problem is at first:
- Can only be done on VPS or dedicated servers = WRONG, we have a shared account for the site in question (
mybandtheme.com)
- Can't remove mod_security at all = WRONG, no need to remove the entire script
- Mod_security is not the problem = WRONG, check for the silent 403 error
So the point is don't let in to their excuses
The point where they let up, was when they saw the silent 403 error when accessing the tinyurl registration URL, they than checked the logs for the mod_security script, they saw that a specific S2 script was doing something that resulted in an error to mod_security, and they whitelisted the specific S2 script.
Oh, and interestingly enough, this whole problem emerged just a few weeks ago for us, just like the other forum thread, so I think this mod_security issue is due to something Hostgator must have done within the last few weeks, so others on Hostgator account will probably have this issue as well.