403 on /store/ipn_main_handler.php?xxxxxxxxx

It seems as though the callback to ZC after loggin in to PayPal pressing continue in PayPal throws the following error on 'postback':

403 Permission Denied
You do not have permission for this request /store/ipn_main_handler.php?type=ec&token=EC-1PB63163DD995290N&PayerID=D5BLAHHHHB84

in my mind it seems like a simple permissions issue, but even setting 755 on that file doesn't solve...any ideas?

Probably something blocked by rules in your .htaccess, perhaps from a so-called SEO addon?

as it stands, the root (public_html) folder has an .htaccess file but the Zen Cart subdirectory (store) does not, can you point me to a generic .htaccess file for ZenCart I don't think there was one in ZC root, should there be? There is one in the admin folder as well. The .htaccess file in the root (public_html) folder is:

RewriteEngine on

RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://mystore.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://mystore.com$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.mystore.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.mystore.com$      [NC]
RewriteCond %{HTTP_REFERER} !^https://mystore.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^https://mystore.com$      [NC]
RewriteCond %{HTTP_REFERER} !^https://www.mystore.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^https://www.mystore.com$      [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp|php)$ - [F,NC]

shave and a haircut, bump bump

You can see the default .htaccess files supplied with Zen Cart by downloading a clean copy of the Zen Cart distribution zip file and unzipping it.
https://www.zen-cart.com/tutorials/index.php?article=323

DrByte:

You can see the default .htaccess files supplied with Zen Cart by downloading a clean copy of the Zen Cart distribution zip file and unzipping it.
https://www.zen-cart.com/tutorials/index.php?article=323

There's no HTACCESS in the zen root folder.

junkbox:

There's no HTACCESS in the zen root folder.
Correct.

And your point is?