Cloudflare blocking Woo Commerce user registrations

What is the name of the domain?

theratogs.com

What is the error number?

NA

What is the error message?

NA

What is the issue you’re encountering

On April 10th, changes were made to my WooCommerce site, and the Cloudflare WAF was configured. Since that time, new user registrations are being held up somewhere, and when they do finally get into the WooCommerce user table, they are incomplete - they only contain the userid and email. When I try DevMode, it still doesn’t work; when I pause Cloudflare altogether, the registrations flow - after a short delay, probably because the cache is off - into the user table as expected. My web hosting manager doesn’t know what the problem is; before I hire a programmer to start a debugging project, I’d like to find out what could be causing this.

What steps have you taken to resolve the issue?

Reviewed all plugins and settings; multiple emails with plugin and Woo support; compared the codebase between Live (not working if Cloudflare is active) and Staging (domain not on my Cloudflare account) where new users are registered as expected.

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

Create a test user account; if CF is active, nothing will happen. Sometimes, a few hours later, the account registration will come through with only the userid and email, and none of the contact information.

Hello!

Can you open your network tab (press: Control+Shift+I), access your registration form and try to register? See if you get a 403 code, if yes, something at your firewall is blocking your form.

To view what is it, go to your CF Firewall page > Events and see what triggered the firewall, so you can adjust it.

Thanks for the quick suggestion. I was able to fill out and post the form without issue; the Issues section on the network tab only indicated one issue: “A ‘cache-control’ header is missing or empty.” plus a bunch of formatting/tag deprecation messages.

I see. Can you try to use a common VPN or WARP to send the form? Or ask a client to fill the form and analyze your Cloudflare WAF traffic and events to see if it triggered any rule including managed and bot rules?

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.