Reply To: Template savings: 403 forbidden due SQL injection

As we can see from the log, you have added some JS code to the Custom JS section in Theme Settings. And when you save Theme Settings, your server blocks this request since it recognizes your JS code as a kind of injection. Try to clear all Theme Settings from JS, CSS nad HTML code and test how it works.