[Bug 58194] New: Screenshots upload broken due to Cloudflare challenge page

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Bug ID: 58194
           Summary: Screenshots upload broken due to Cloudflare challenge
                    page
           Product: WineHQ Apps Database
           Version: unspecified
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: appdb-unknown
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

I'm trying to upload some screenshots for apps I maintain, when I got
challenged by Cloudflare out of the blue (and as we recall, they have a strong
dislike for web browsers like mine, SeaMonkey). Even after I manage to pass the
challenge, I get a error page telling me I didn't specified the Wine version
for the screenshot, but it's quite obvious what's happening here: the CF
challenge is getting in the way, eating the POST'd form data (including the
screenshot itself!), and after getting past the challenge, screenshots.php
receives no data at all, so it errors out with the first missing piece of
information it can find, I guess.

This is a very weird place to put a challenge, since it effectively breaks the
workflow, and furthermore, I noticed WineHQ is migrating away from Cloudflare
challenges to Anubis (which is more tolerant with non-mainstream browsers), but
somehow this one slipped down the cracks.

[Bug 58194] Screenshots upload broken due to Cloudflare challenge page

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

--- Comment #1 from Tom Maneiro  ---
Correction: after checking through my web browser developer tools, here is how
this broken workflow develops:

1) Select an application, a version, and click "Add screenshot" - this sends
you to /screenshots.php?iAppId=X&iVersionId=Y via standard HTTP GET.

2) Fill in the form with the required fields (including the screenshot itself),
click Send File. This sends in the form contents via POST to /screenshots.php.
Unfortunately this triggers a Cloudflare challenge, which throws away the
POSTed data.

3) Once you manage to pass the challenge, you get returned to /screenshots.php
via GET, which of course is NOT the intended method! And calling
/screenshots.php this way just returns a unhelpful "If you would like to submit
screenshots, please select an application version below." with nothing to
select, since no appId/versionId are being specified.

So basically this leftover (?) challenge is breaking the screenshot submit form
because it is not intended to preserve POST params for the customer
application.

[Bug 58194] Screenshots upload broken due to Cloudflare challenge page

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 58194] Data lost due to Cloudflare challenge

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Screenshots upload broken   |Data lost due to Cloudflare
                   |due to Cloudflare challenge |challenge
                   |page                        |
           Severity|normal                      |major

[Bug 58194] Data lost due to Cloudflare challenge

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #2 from Ken Sharp  ---
*** Bug 57844 has been marked as a duplicate of this bug. ***

[Bug 58194] Data lost due to Cloudflare challenge

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
             Status|UNCONFIRMED                 |NEW

--- Comment #3 from Ken Sharp  ---
Anubis wants in on the fun too.
Submitting a bug link --> Anubis --> 404 not found.

[Bug 58194] Data lost due to Cloudflare challenge

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58194

Jeremy Newman  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|[e-mail]        |[e-mail]

--- Comment #4 from Jeremy Newman  ---
I've disabled the Cloudflare WAF, and updated Anubis to the latest version.
There have been quite a few fixes to it since the version that was installed.

Check and see if it works better now and let me know.