jquery.js:4 POST http://www.dominio.com/Game/Strucker/control/send2.php 403 (Forbidden)

session_start();
if($_SESSION['id']) {
$user = $_SESSION['usuario'];
$balas = $_POST['score'];
if($balas == 5){
    $_SESSION['activescore'] += 5;
    $scor1= $_SESSION['activescore'];
    echo $scor1;
}else if($balas == 2){
        $_SESSION['activescore'] += 2;
    $scor2= $_SESSION['activescore'];
    echo $scor2;
}else if($balas == 1){
        $_SESSION['activescore'] += 1;
    $scor3 = $_SESSION['activescore'];
    echo $scor3;
 
}else{
    $scor5= "Te hemos baneado por usar programar ilegales.";
     echo $scor5;
}
}
 

function send(score){
        var atp = {
                "score"  : score
        };
        $.ajax({           
                data:  atp,
                url:   'control/send2.php',
                type:  'POST',
                success:function(data){
                     score2 = data;
 
        }     
        });
}
 

 
...............
					scorewin = parseInt(data);
 
				}
		});
	}

function tl2(score){
		var sch = {
                "score"  : score
        };
        $.ajax({     
                data:  gg3,
                url:   'api/chop2.php',
                type:  'POST',
                success:function(data){
					scorewin = data;
 
				}
		});
	}
 

$user = $_SESSION['usuario'];
$sql1 = "SELECT level FROM usersg1 WHERE name ='$user'";
$sql2 = $link->query($sql1);
$sql3 = $sql2->fetch_array();
$nivel = $sql3['level'];
$sql4 = "SELECT las_win FROM game1 WHERE level ='$nivel'";
$sql5 = $link->query($sql4);
$sql6 = $sql5->fetch_array();
echo $sql6['las_win'];
 

if(score >= scorewin){
				console.log("Has ganado SCORE: "+score+" SCORE PARA GANAR: "+scorewin);
			}