Managed Challenge 500 Error for POST Requests with sid Query Parameter — Login & Register Pages Neve
Hello Cloudflare Support,
Since around a few day ago, POST requests to our phpBB login and registration pages fail with a 500 Internal Server Error generated by Cloudflare’s edge after passing the Managed Challenge.
Key facts:
This was working previously with no changes to our origin or application.
The 500 error is coming directly from Cloudflare’s edge (not our origin).
Requests never reach our origin server — no entries in Apache/nginx or PHP logs.
The issue occurs only after Managed Challenge on POST requests with form data that include a sid session ID in the query string; requests without sid work fine.
Example affected URLs:
https://www.wagnardsoft.com/forums/ucp.php?mode=login&sid=...
https://www.wagnardsoft.com/forums/ucp.php?mode=register&sid=...
Example Ray ID: 96bf31addb65a204-YYZ (register page)
Request method: POST, content-type: application/x-www-form-urlencoded.
After challenge is solved, Cloudflare fails to replay the POST to the origin and responds with a 500.
Note accessing without the &sid=.... work
disabling the managed challenge for theses page also work.
Steps to Reproduce:
Visit https://www.wagnardsoft.com/forums/ucp.php?mode=register&sid=... or ...mode=login&sid=...
Pass the Managed Challenge. (usually automatic)
Check origin logs — no request is received.
Impact:
Users cannot log in or register if they are presented with a Managed Challenge and the URL contains a sid parameter, blocking forum access for affected visitors.

10 Replies
Pretty much exactly the same experience. Error 500 is on the Cloudflare edge end, not the origin server. Visitors are unable to even visit the root forum URL after passing the managed challenge: https://www.starwraith.com/forum/index.php After passing the managed challenge, you can manually copy and paste the URL and see that the origin site itself is working fine. This also started to happen a few days ago for us.
do you have a full example url which reproduces? with no sid value, it seems to work fine for me, same with passing just
a
Mine will fail about 99% of the time or more with the direct root URL above. Continually pressing F5 to refresh and send the request will eventually load the site, but it typically takes anywhere from around 90-150 times.
We're investigating the issue. Status page is coming up, thanks for the report!
Here is a way to repro:
with chrome in "incognito mode". go to https://www.wagnardsoft.com/forums/ then click on the login or register on top right (incognito is just to help make the managed challenge actually appear)
Thank you for looking into it!
This is now resolved, thanks for reporting
Indeed, working well. Thanks for fixing it so quickly!
Confirmed working, thanks for the fast reaction. Have a nice day