"Sorry You've Been Blocked" wp-config

[Casprom]

Answer these questions to help the Community help you with Security questions.

Have you searched for an answer?
yes, including here in the community and also in the tutorial which may not be updated

Please share your search results url:

Sorry, you have been blocked

This tutorial covers the message ‘Sorry, you have been blocked’ which can show to visitors of a website using Cloudflare. This covers pages that look like: [image] This is caused by Cloudflare’s WAF being triggered. The WAF is only available on paid plans, so this message is not generally seen when visiting sites on the free plan. If your visitors do see this on a free plan site, it is probably due to rules active to protect against specific vulnerabilities, as explained in this blog post, …

Describe the issue you are having:
This only happens with wp-config.php file of my Wordpress website. I can’t either download, edit or view this file on my cpanel. When I try to download it, nothing happens, the download never starts, and when I try to view or edit the file, I get the “Sorry, you’ve been blocked” screen.

Please attach a screenshot of the error:

[cbrandt]

Have you tried the suggestion in the Community Tutorial, to change the action from Block to Managed Challenge?

Another alternative is to create a WAF Exception for this rule, perhaps exempting your IP address or some other pattern.

Defining WAF exceptions · Cloudflare Web Application Firewall (WAF) docs

[Casprom]

Hi cbrandt, thank you for answering so quickly. How do I do any of those options?
I’m on a free plan btw.

[cbrandt]

If you are on a Free Plan, you cannot edit WAF Managed Rules. You should try to find a way to set your cpanel to read this file locally. Ask your hosting provider support about this.