ReCaptcha Page by Litespeed via Hostigner is getting Cached by Cloudflare

Hi all,

I posted about this about a month ago and still looking for help.

Litespeed via Hostigner occassionaly challenges visits to my website and shows a reCAPTCHA challenge. However, Cloudflare is caching this and serving it in a loop and website becomes totally inaccessible unless purging from dashboard.

I am on the Cloudflare pro plan and could really do with some help in some way around to stop this from happening.

The performance boost from cloudflare too much to give it up and moving hosts from Hostinger would be monumental and hostinger refuses to stop the recaptchas as it's a core security feature that cant be changed

Could someone advise?

Laudian•4/16/25, 5:00 PM

Did you create a rule in Cloudflare to cache pages? Cloudflare shouldn't cache it by default.

ArianOP•4/16/25, 6:13 PM

@Laudian So I have created two rules which are deployed

1) First one: Where I (believe) am instructing cloudflare NOT to cache if either of the cookies in the screenshot are present
2) Second: where I am instructing to no cache if URL contains "Checkout" "Wish-list" or "Cart"

Could it be by making these two rules my interpretation of how cloudflare treats these are wrong and caused this issue inadvertedly? (Other than these two rules I don't have anything else rule-wise

AArian @Laudian So I have created two rules which are deployed 1) First one: Where I...

Laudian•4/16/25, 10:17 PM

Can you share a URL that you see the issue on? Doesn't need to happen now, I'm just curious to the filetype etc.

ArianOP•4/16/25, 10:55 PM

@Laudian It happens on any page, randomly and periodically

website is rapidscooter.co.uk

I took some screenshots of the network tab last time it happened

AArian @Laudian It happens on any page, randomly and periodically website is rapidsco...

Laudian•4/16/25, 11:09 PM

You're using the Cloudflare Wordpress plugin, that explains why the site is being cached.

ArianOP•4/16/25, 11:10 PM

Aha? and you are saying I shouldn't use the Cloudflares APO plugin?

Laudian•4/16/25, 11:11 PM

No, but I was trying to figure out why the site was cached at all when you only had bypass rules.

ArianOP•4/16/25, 11:12 PM

Ah I see, both Cloudflare and WP-Rocket (caching plugin I use) recommended i install and use Cloudflares plugin. Guessing you don't have any ideas?

AArian Ah I see, both Cloudflare and WP-Rocket (caching plugin I use) recommended i in...

Laudian•4/16/25, 11:15 PM

Give me a moment to think please

AArian Ah I see, both Cloudflare and WP-Rocket (caching plugin I use) recommended i in...

Laudian•4/16/25, 11:19 PM

This might help you:
https://community.cloudflare.com/t/preventing-cache-in-wordpress-apo-on-pages-with-no-cache-header/692725

Laudian•4/16/25, 11:21 PM

Haven't tried it myself but it seems reasonable.

ArianOP•4/16/25, 11:27 PM

Will definitely give that a try

although, I do have one question. From a WordPress point of view this this will modify the headers into an understandable command for Cloudflare to not cache. But when reCAPTCHA is deployed its deployed from server level I guess with it's own headers? Wouldn't cloudflare just cache based on that then?

AArian Will definitely give that a try although, I do have one question. From a WordP...

Laudian•4/16/25, 11:28 PM

Oh, you're right. The reCaptcha comes before Wordpress...

I kinda doubt you can influence what headers Hostinger sends there.

AArian Will definitely give that a try although, I do have one question. From a WordP...

Laudian•4/16/25, 11:28 PM

I thought it was a Wordpress plugin doing the reCaptcha, but you said it was the host.

ArianOP•4/16/25, 11:28 PM

Exactly, story of my life in the last 30 days :;)

ArianOP•4/16/25, 11:30 PM

I reached out to Cloudflare and opened a ticket 24 days ago, they replied first asking for some information, after providing I didn't hear back at all any further despite chasers. Hostinger's support won't help as they don't give that level control to users.

Laudian•4/16/25, 11:30 PM

Do you have a dev environment where you can try stuff without risking to expose any private information?

ArianOP•4/16/25, 11:30 PM

Like a staged env? if so yes

Laudian•4/16/25, 11:33 PM

can you try a cache rule where you use

Then
Edge TTL =>

It's a wild shot though.

ArianOP•4/16/25, 11:37 PM

replace staging.example.com with like staging.rapidscooter.co.uk?

AArian @Laudian It happens on any page, randomly and periodically website is rapidsco...

ArianOP•4/16/25, 11:39 PM

@Laudian if you check this screenshot the request URL is the same as my own domain, just renders the server loaded recaptcha page. so doubt this would work. Do you know in this rule what paramter "hostname" is that cloudflare looks at?

ArianOP•4/16/25, 11:42 PM

Oh hang on, are you saying to use this to sort of override the Cloudflares APO Plugin quirk?

AArian Oh hang on, are you saying to use this to sort of override the Cloudflares APO P...

Laudian•4/16/25, 11:46 PM

Yes, but I'm not sure if it would work.

Laudian•4/16/25, 11:47 PM

It would stop these reCaptcha pages from being cached, but it might break other stuff.

ArianOP•4/17/25, 1:04 AM

Ill just try this on production site, if it breaks anything i'll revert it quickly

AArian Ill just try this on production site, if it breaks anything i'll revert it quick...

Laudian•4/17/25, 1:10 AM

I've thought about it a bit more, I'm pretty sure it's not going to work.

ArianOP•4/17/25, 1:11 AM

Do you know who might be able to help and I could reachout to potentially?

AArian Do you know who might be able to help and I could reachout to potentially?

Laudian•4/17/25, 1:13 AM

The problem with Cache Rules is that they operate on the request, not the response.

I'm currently checking with my own Wordpress installation if there is any way to have it respect no-cache headers, but I haven't used that installation in forever, and of course it's not working...

ArianOP•4/17/25, 1:14 AM

Oh wow, I really appreciate that and that you're puting time in this. Let me know if you find anytning

AArian Oh wow, I really appreciate that and that you're puting time in this. Let me kno...

Laudian•4/17/25, 1:15 AM

I'll need to figure out why the CF plugin isn't working for me anyway

Last time I tried something, it did work...

AArian Oh wow, I really appreciate that and that you're puting time in this. Let me kno...

Laudian•4/17/25, 1:28 AM

Hmm, I'm again confused. When I set on my server, Cloudflare doesn't cache the response, even though the plugin is enabled. Why does it cache yours?

Laudian•4/17/25, 1:35 AM

Aaaaarghs, it's just the plugin not working again ~.~

ArianOP•4/17/25, 1:36 AM

How are you setting that, in htaccess?

Laudian•4/17/25, 1:59 AM

Yeah, I just don't think APO is going to be compatible with Hostinger if they serve reCaptcha occasionally.

I haven't found a way to make Cloudflare respect the cache-control header. cdn-cache-control works, so maybe you can convince Hostinger to add that header to their Captcha page as well.

Laudian•4/17/25, 2:01 AM

For now, I think you'll need to disable APO.