Posting SQL code on bbForum Triggers Security Rules by CloudFlare

I was trying to post some reply containing SQL code on bbForum and somehow it leads to this page:

cf-bbforum

I have tried setting the security level from medium to low, but still doesn’t help.

Finding the Cause

If you browse to the traffic tab link below.

https://www.cloudflare.com/a/traffic/[yourdomain]

You can analyze why this is being blocked and what rules it is hitting on the WAF (Web Application Firewall). The following is from Traffic Control Tab in CloudFlare, we can see that a list of requests have been denied by CloudFlare servers.

cf-traffic-control

Click each event, so see more details:

cloudflare-event-details

The rules or match triggered:

cloudflare-event-details-rules-triggered

You have a number of options.

• Whitelist the IP you are doing this task from to bypass the WAF
• Disable the WAF rules that are flagging this.
• Create a Page Rule to turn off the WAF for that specific page URL.

In this case, you can choose to disable the WAF rules (easiest, go to WAF and disable by that RuleID 100009C) or Create a page rule (for forum pages):

cloudflare-waf-disable

CloudFlare Technology

• CloudFlare: Change Security Level Value Programmatically for Multiple Domains via PHP/Python/Bash Script
• How to Transfer Domain From Namesilo to CloudFlare Registra?
• A Simple Rate Limiter for CloudFlare Workers (Serverless API) based on KV Stores
• Cloudflare Worker Unexpected High Usage of API Requests - How to Avoid Surprising Billing?
• Tutorial: How to Set Up a API Load Balancer by Using CloudFlare Worker?
• How to Fix CloudFlare Error 1101 (Worker threw exception)?
• Using CloudFlare Worker Serverless Technology to Deploy a Load Balancer (RPC Node) for Steem Blockchain
• Set Up Website Health Checks (Canaries) using CloudFlare
• CloudFlare Internet Summit - Recaps
• Does CloudFlare Cache 403 and 503 By Default?
• The PHP Page Rule Checker of CloudFlare
• Cloudflare Offers Dedicated SSL Certificates
• How to Clear CloudFlare Caches of Multiple URLs using PHP Script with CloudFlare API?
• Does CloudFlare (Cache Everything) Affect the Adsense?
• Posting SQL code on bbForum Triggers Security Rules by CloudFlare
• How to Offload Your Server by Using CloudFlare - Cache Everything?

–EOF (The Ultimate Computing & Technology Blog) —