Cloudflare Blocking WHMCS Functionality

What is the name of the domain?

What is the issue you’re encountering

With cloudflare turned on, when i try to apply a payment to an existing invoice within WHMCS billing system, nothing happens. But, when i bypass cloudflare thru the hosts file, the system works fine.

What steps have you taken to resolve the issue?

Turning cloudflare on and off.

What are the steps to reproduce the issue?

Turning cloudflare on and off.

I’d suggest you to double-check the Security → Events at Cloudflare dashboard under your Cloudflare account for your zone, or via direct link https://dash.cloudflare.com/?to=/:account/:zone/security/events.

You should be able to see the challenged or blocked event under the Security tab → Events at Cloudflare dashboard for your zone and know exactly which security option was triggered.

Once you find them, click on a particular one to find more details about it (user-agent, IP, HTTP version …). If yes, could you share some details which service was triggered that blocked you?

Obviously some Managed Rule, for which you can Add Exception/Bypass/Skip using a Pro plan. Otherwise, there might be some other way or a workaround for it.

Thats part of my problem. I have no idea where to look within the location you suggested or what i am looking for.

Since you’re using WHMCS, below post could help you in terms of allowing Cloudflare to connect to your origin host:

On the Events list from the shared URL address, once you select your Cloudflare account and your zone, you’re redirected to the Events page.
Using the linked articles for help, you’d be able to find those blocked events, rather requests, which you’re referring to.
You can use Filter where URI Path contains a part of the url e.g. payment.php page or some other where you got that Cloudflare block page present.
Otherwise, once you get this block page, you can Filter by the Ray ID shown on the bottom of the screen e.g. Cloudflare Ray ID: 90d60172fafdec2a as shown here:

Clicking on particular event from the list:

You’re able to check what action was taken, what service blocked your payment request or page request, which Rule and which Ruleset, etc.

I have checked and
Cloudflare® Proxy Check
The Cloudflare IP address resolved successfully.

Secondly, i see quite a few entries in the security events for /hosting/login.php but NOTHING about what happens once i log in. There are a lot of entries in regards to /hosting/login.php and here is the output but, i dont see anything related to what is happening after i login, let alone anything close to the pages i am accessing within the WHMCS or the what is being blocked by cloudflare.

Matched service

  • Service

Custom rules

  • Action taken

Skip

    • Ruleset

default

  • Rule

Request details

  • Ray ID

90d6025dfb264df1

  • IP address

104.218.68.139

  • ASN

AS15108 ALLO-COMM

  • Country

United States

  • User agent

RPT-HTTPClient/0.3-3E

  • HTTP Version

HTTP/1.1

  • Referer

None (direct)

  • Method

GET

  • Host
  • Path

/hosting/login

  • Query string

Empty query string

UPDATE: I completely turned off the WAF and that still did not fix the issue. So, what else could be stopping a freaking pop up and post action for posting a payment to an invoice?

May I ask how and where did you do it at Cloudflare dasboard for your Website? :thinking:

Did you found what service was triggered under the Events?

You still getting the same block error page from Cloudflare, or rather something else? Could you share a screenshot?

Are the DNS records still proxied :orange:?

May I ask if you’re using Free or Paid Cloudflare plan type for your Website?

Maybe it was Managed Rules:

If yes, may I ask if the Bot Fight Mode feature is enabled at Cloudflare dashboard?

Maybe Browser Integrity Check:

May I ask what’s your Security Level set to?:

I am NOT getting a blocked page. A setting in cloudflare is not allowing an “action” within the WHMCS billing system. When i totally bypass cloudflare all together, the system works fine, but the second cloudflare takes over, i cant “post a payment to an invoice”. When i click the “apply payment button” it just sits there and spins… Generally, a pop-up will appear and ask me if i want to post the payment and i click yets. The pop-up is not happening. Nothing is happening.

I have the pro plan… I cannot find within the security events anything at all related to what is going on with the issue i am having.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.