Starting a new topic here to handle any issues with login. For background, I’ve been suffering with having to manually select and delete literally hundreds of spambot-created accounts every week on our WordPress server for some time. I beat them back a year ago with IP-based blocking, but several months ago, the attacks changed techniques and bypassed my blocking attempts.
We’ve been experimenting with different security plugins and settings, but nothing was working. Our developer decided to try a new tack, so he enabled Cloudflare’s options for differentiating between human and spambot traffic on the registration and login pages. So far today, that has been entirely effective.
The practical upshot of this is that you’ll see a Cloudflare interstitial page when you login to the TidBITS site. You’d also get it if you tried to register a new account. Nothing else should be affected. I hope.
I also hope this will let us disable some of our overlapping security plugins that were causing other inexplicable issues (such as breaking the lost password function; that’s now working again).
[Bringing these over to keep things on topic… -Adam]
Not sorry Captcha was short lived. But what was that flashing by as I logged in just now? Too fast (well, actually fast is a good thing here) to resolve.
Thanks for continually trying to keep this a good experience!
That’s unrelated to the Discourse spam filtering— it’s the Cloudflare “are you a human” check. We turned off the reCAPTCHA check on login and register and switched to Cloudflare in the hope that it might actually work. I’ve been deleting hundreds of spambot-created accounts every few days for way too long.
That seems to be what I see. I don’t normally log in to the main site (I just read the articles via links from the corresponding Talk page), but it worked as you described - a CloudFlare interstitial and everything seems to work.