tried both, still get forbidden when running the backup
Have you access to the log files? Any Mod Security error should be logged there including the exact pattern that cause the error.
And yes mod_security is still used to this day by shared hosts.
Did I say something else? I was taking about Suhosin.
