I have a WordPress/WooCommerce website and an internal e-commerce management system (called WSM) that runs on a separate server.
We use the basic version of Cloudflare, mainly for DNS and domain management. On the WSM side, we have a cron job that runs every 10 minutes to access a specific file on the WordPress site (www.mydomain.co.uk/wsm/remote.php) via cURL, which returns a JSON response with new order data. This setup has worked reliably for years without any issues.
However, it seems that Cloudflare has recently updated its security settings, and our script is now being blocked when trying to access that file.
I'd like help resolving this — ideally by configuring specific rules in Cloudflare to allow our script to access that file as before, while keeping Cloudflare active for its performance and security benefits.
As an example of the issue, you can see the error here: https://phpstack-128130-368005.cloudwaysapps.com/test/runner.php
I'm not a Cloudflare or security expert myself, so I find the available options a bit confusing. If you’re confident you can fix this issue, please let me know. I’m happy to provide the scripts involved and access credentials if needed.
If you’d like to try but aren’t 100% sure, that’s fine too — but I’d prefer to only pay if the issue is actually resolved. I’d also appreciate a clear summary of what changes were made so we can document it for future reference or reversal if needed.
If you consider this a relatively easy job and would like to quote lower, I'd definitely consider pricing when deciding who to give the job to (sorry, we're a very small business).
