Cloudflare WAF Rules don't work exactly

[joel-krs]

What is the name of the domain?

hypernex.xyz

What is the issue you’re encountering

I have set up WAF rules to make my sites more secure. However, if my pages on the “/” path are attacked, they are very badly affected by the attack. But if you attack “/register”, “/login” or “/auth/login” for example, everything will be blocked by cloudflare.

What steps have you taken to resolve the issue?

I’ve already tried changing my rules but none of my solutions work and the website still goes down.
I have sent a screenshot of my rules below

What is the current SSL/TLS setting?

Full (strict)

Screenshot of the error

[sjr]

You need to rethink your rules. It’s impossible for a URI to start with /login AND start with /register for example, so that will always be false.

[joel-krs]

Thank you