Can't i block users who disables javascript by setting on cloudflare


#1

for blocking bad guys using crawler for downloading my images


#2

Whom do you want to block? What you can do is increase your security level or even switch on Under Attack mode, in which case every user will have to go through a JavaScript validation.


#3

no no the guy who made the program knows how to avoid cloudflare js check
the program can avoid js check


#4

i just want cloudflare add firewall or page rules like
checking user’s js status and if he or she disabled it
just block them to see my page


#5

In that case he must be executing JavaScript and there is no way to block that. You can only block his IP address or network range if you can pinpoint that.


#6


avoid like this


#7

and i even can’t block his IP bcoz many ppl use that program (exe)


#8

And have you tried Under Attack mode?


#9

yep…


#10

And how did he manage to circumvent it?


#11

i posted an image

like this way


#12

That is unrelated and not a way to circumvent anything.


#13

ah really…? i just emailed the developer about this issue now
hmmm but the program can avoid js check idk how tho


#14

Well, I am afraid at this point it is all just guessing.

If you force your visitor to complete the JavaScript challenge you will effectively lock out everyone and everything without JavaScript support. If that crawler still manages to get past it must execute JavaScript and - as I mentioned - that is difficult to impossible to block in this case.

You could only implement some server-side logic in this case which is specific to your case and that topic is way beyond this forum here :slight_smile:


#15

If it’s some sort of program, I’d expect it’s sending some sort of User Agent string (or blank). Or it’s randomly making up strings.

Have you looked into filtering by User Agent string?


#16

hmmmm isn’t there any way to block crawler? :’(


#17

Good point :+1: though I assume if someone is sophisticated enough to bypass Cloudflare they will send a common string. Maybe better “hope” than “assume” :wink:


#18

Of course there are ways, but there is no way to say anything more concrete with the information you provided and that topic is also generally off-topic for here :wink:

But anyhow, can you post several excerpts from your log which are from that crawler?