Big issue with hCaptcha! Please help

Feedback Usage & Design
1

Hello,

I have a big issue with the new hCaptcha. Since I am using the Cloudflare SSL and I am redirecting from http to https every single time a user tries to enter the website just by its name (meaning http by default) it gets a captcha challenge. I tested it myself. I solve the captcha, close the tab and in the browser I write the name of the website just like a regular visitor and than I have a captcha again. In other words every time there is a redirect a new captcha appears, this was no issue when there was reCaptcha, not sure why, but it remembered that you solved it.

I am seeing significant decrease in user visits since 2 days ago and I am sure it is related to the new hCaptcha. Please help me fix the issue. This is tormenting my visitors. Thank you.

1 Like
2
3

Than you for the interest.

  1. Domain is: cinewhale.com
  2. Security level:
    Security Level 1
    Security Level 11058Ă—452 14.9 KB

    Security Level 2
    Security Level 21063Ă—644 27.5 KB
  3. Acivity Log:
    Activity 1
    Activity 11022Ă—629 24.6 KB

    Activity 2
    Activity 21052Ă—634 25.7 KB

So when enter the domain and the captcha is solved, if you delete the “s” from “https://” and hit enter it will ask for captcha again.

4

Do the challenges you experience match the events in the log? If so, can you click on one of those entries and post a screenshot of it?

5

I am not sure which one of the logged challenges are real visitors, because I am experiencing big DDOS for more than 18 months now and only the captcha saves my server.

I will make a screen of one of the enteries.

28.03.2020_01.42.22_REC
28.03.2020_01.42.22_REC1025Ă—525 14.4 KB

When the old captcha was active the redirection between http and https were not a issue. But I am not sure if this is related to the captcha itself. Maiby I should readjust some settings?

6

Well, you have a rule called “Captcha for everyone”, I guess that pretty much summarises it :slight_smile:

7

Well yes, everyone should get captcha 1 time, as it was before. But now, every single time there is a captcha, while before the new changes captcha was appearing onec every few days per IP.

8

So the issue is not the captcha itself, but rather that it reappears after it was already passed? How quickly does it reappear?

9

If I solve it now. And 2 seconds after that close the tab and add domain name without “https” it asks me again.

If I solve captcha and just try to delete the “s” in https and hit enter it will challenge me this very second.

10

It probably is best to open a support ticket for this. Support might be able to tell why the challenge is not persisted.

11

Thank you, I will open a ticket. Can you tell me where I can do that?

12

At https://support.cloudflare.com/requests/new

13

Hello,

This may be working as intended: hCaptcha on Cloudflare’s anti-bot pages is currently configured to request a captcha on each visit.

14

I doubt it to be honest :slight_smile:. What is “each visit”? Cloudflare always ran a captcha on each new session, but not on each new request which the OP seems to experience.

15

I think they have implemented in a way that if one fails other pops up.

16

Sadly, it is asking on every single request that has redirect in it (from http to https, or from www.website.com to website.com) if there is a redirect the captcha appears no matter if you solve 3 or 4 times in a roll, it always asks for more.

More and more visitors are staring to complain about the issue, and it is affecting my visit count drastically. I might be forced to search for Cloudflare alternatives. :(((

17

Ah, I see what you mean: https://cinewhale.com/ only asks once. After you answer it, you can reload as much as you want.

But the next visit to http://cinewhale.com/ does indeed trigger a captcha again.

Yes, that seems like an implementation issue with CF redirect pages. We’ll raise it as well.

18

The problem i face is about loading the images… Taking some time to load images even if they are on cloudflare CDN, since there are many images…

And another is about 2 slides minimum to verify the captcha…

19

Thank you, your timely assistance on remedying the bug would be much appreciated.

20

Yeah, the two slides are a bit of a pain in the bottom. If the difficulty level is lower it might be easier to solve. As long as it ask you once for captcha I think people could manage.