Managed Challenge 500 Error for POST Requests with sid Query Parameter — Login & Register Pages Neve

Hello Cloudflare Support, Since around a few day ago, POST requests to our phpBB login and registration pages fail with a 500 Internal Server Error generated by Cloudflare’s edge after passing the Managed Challenge. Key facts: This was working previously with no changes to our origin or application. The 500 error is coming directly from Cloudflare’s edge (not our origin). Requests never reach our origin server — no entries in Apache/nginx or PHP logs. The issue occurs only after Managed Challenge on POST requests with form data that include a sid session ID in the query string; requests without sid work fine. Example affected URLs: https://www.wagnardsoft.com/forums/ucp.php?mode=login&sid=... https://www.wagnardsoft.com/forums/ucp.php?mode=register&sid=... Example Ray ID: 96bf31addb65a204-YYZ (register page) Request method: POST, content-type: application/x-www-form-urlencoded. After challenge is solved, Cloudflare fails to replay the POST to the origin and responds with a 500. Note accessing without the &sid=.... work disabling the managed challenge for theses page also work. Steps to Reproduce: Visit https://www.wagnardsoft.com/forums/ucp.php?mode=register&sid=... or ...mode=login&sid=... Pass the Managed Challenge. (usually automatic) Check origin logs — no request is received. Impact: Users cannot log in or register if they are presented with a Managed Challenge and the URL contains a sid parameter, blocking forum access for affected visitors.
No description
10 Replies
Vice
Vice2mo ago
Pretty much exactly the same experience. Error 500 is on the Cloudflare edge end, not the origin server. Visitors are unable to even visit the root forum URL after passing the managed challenge: https://www.starwraith.com/forum/index.php After passing the managed challenge, you can manually copy and paste the URL and see that the origin site itself is working fine. This also started to happen a few days ago for us.
Walshy
Walshy2mo ago
do you have a full example url which reproduces? with no sid value, it seems to work fine for me, same with passing just a
Vice
Vice2mo ago
Mine will fail about 99% of the time or more with the direct root URL above. Continually pressing F5 to refresh and send the request will eventually load the site, but it typically takes anywhere from around 90-150 times.
Walshy
Walshy2mo ago
We're investigating the issue. Status page is coming up, thanks for the report!
Wagnard
WagnardOP2mo ago
Here is a way to repro: with chrome in "incognito mode". go to https://www.wagnardsoft.com/forums/ then click on the login or register on top right (incognito is just to help make the managed challenge actually appear)
Vice
Vice2mo ago
Thank you for looking into it!
Walshy
Walshy2mo ago
This is now resolved, thanks for reporting
Vice
Vice2mo ago
Indeed, working well. Thanks for fixing it so quickly!
Wagnard
WagnardOP2mo ago
Confirmed working, thanks for the fast reaction. Have a nice day

Did you find this page helpful?