<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Jamal Pinang</title>
    <description>The latest articles on Forem by Jamal Pinang (@jamalpinang).</description>
    <link>https://forem.com/jamalpinang</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3677670%2F6b8fa4ac-b84a-40fa-b2d7-f826f9dfd282.png</url>
      <title>Forem: Jamal Pinang</title>
      <link>https://forem.com/jamalpinang</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/jamalpinang"/>
    <language>en</language>
    <item>
      <title>Solving the "410 Gone" &amp; Cloudflare Loop Issue on Shared Hosting (Case Study)</title>
      <dc:creator>Jamal Pinang</dc:creator>
      <pubDate>Thu, 25 Dec 2025 05:03:03 +0000</pubDate>
      <link>https://forem.com/jamalpinang/solving-the-410-gone-cloudflare-loop-issue-on-shared-hosting-case-study-3kkd</link>
      <guid>https://forem.com/jamalpinang/solving-the-410-gone-cloudflare-loop-issue-on-shared-hosting-case-study-3kkd</guid>
      <description>&lt;p&gt;Hello devs! 👋&lt;/p&gt;

&lt;p&gt;I’m &lt;strong&gt;Jamal Pinang&lt;/strong&gt;, a Fullstack Developer and the founder of &lt;a href="https://instaindo.com" rel="noopener noreferrer"&gt;InstaIndo&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;Today, I want to share a quick "battle story" I faced while deploying my PHP automation platform. If you are using &lt;strong&gt;Cloudflare&lt;/strong&gt; with a shared hosting provider (cPanel/Imunify360), you might have faced the dreaded "&lt;strong&gt;Verification Loop&lt;/strong&gt;" or the "&lt;strong&gt;410 Gone"&lt;/strong&gt; error.&lt;/p&gt;

&lt;p&gt;Here is how I fixed it.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The Problem&lt;/strong&gt;&lt;br&gt;
My project, &lt;a href="https://instaindo.com" rel="noopener noreferrer"&gt;InstaIndo&lt;/a&gt;, uses Cloudflare for CDN and security. Suddenly, my users reported that they couldn't access the site. They were stuck in an infinite "Imunify360 Verification" loop.&lt;/p&gt;

&lt;p&gt;When I tried to disable &lt;em&gt;ModSecurity&lt;/em&gt; in cPanel to fix it, it got worse: the site threw a &lt;strong&gt;410 Gone&lt;/strong&gt; error with a &lt;em&gt;weird&lt;/em&gt; wsidchk parameter in the URL.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The Root Cause&lt;/strong&gt;&lt;br&gt;
It turns out, the firewall on my hosting server (Imunify360) was detecting all traffic as coming from &lt;strong&gt;Cloudflare's IP addresses&lt;/strong&gt;, not the real visitor's IP. Seeing thousands of requests from the same IP, the firewall blocked it as a DDoS attack.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The Solution that Worked&lt;/strong&gt;&lt;br&gt;
If you face this, don't just disable your security settings.&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Check Cloudflare SSL&lt;/strong&gt;: Ensure it is set to &lt;strong&gt;Full&lt;/strong&gt; (not Flexible) to avoid redirect loops.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;ModRemoteIP is Key&lt;/strong&gt;: The hosting provider MUST enable &lt;em&gt;mod_remoteip&lt;/em&gt; (Apache) or properly configure the Real IP header on their LiteSpeed server.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Whitelist Cloudflare IPs&lt;/strong&gt;: I had to contact my hosting support to manually whitelist Cloudflare's IPv4 and IPv6 ranges in their Imunify360 firewall settings.&lt;/p&gt;&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;After the whitelist was applied and I hit "&lt;strong&gt;Purge Everything&lt;/strong&gt;" on Cloudflare, my site &lt;a href="https://instaindo.com" rel="noopener noreferrer"&gt;InstaIndo&lt;/a&gt; is finally back online and faster than ever.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Tech Stack&lt;/strong&gt;&lt;br&gt;
For those asking, my platform is built using:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Backend&lt;/strong&gt;: Native PHP (optimized for speed).&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Frontend&lt;/strong&gt;: HTML5 &amp;amp; Bootstrap.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Automation&lt;/strong&gt;: Python scripts for backend worker processes.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I'm currently working on adding more automation features for marketplace optimization. Feel free to check out my work or connect with me here!&lt;/p&gt;

&lt;p&gt;Happy coding! 🚀&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>php</category>
      <category>cloudflare</category>
      <category>devops</category>
    </item>
  </channel>
</rss>
