Hi I received the email updating me about my order being prepared, and I only have limited time to update my payment info, which luckily I did yesterday.
However, starting this morning I cannot login in my account anymore, and when I try, a pop-up appears, telling me “Captcha verification failed, please try again.”
I tried to login from my mobile phone, with Chrome, edge, deleting cookies and then from an incognito session. I also tried from my desktop, without luck.
I searched in the forums and I could not find anybody else with a similar problem, so I am not sure what else to try, that’s why I am here
Do you know how can I unblock this situation? I would like to check on my order, but so far nothing worked.
I didn’t try to change my password, as I am not sure if this would complicate even more the process or accessing my account again.
Yeah, Framework’s website is all kinds of broken lately. Everywhere I click I either have to click a “capcha” checkbox to proceed, or I just get a completely empty error page that states “Your browser is out of date. Update your browser to view this site properly.” In reality, my browser could not be any more up to date. Framework is really shooting themselves in the foot lately with the website (or…they are under constant dos attack and everyone suffers)…Who knows.
EDIT…and look, there is even a random captcha at the bottom of every page that I can click for fun.
I was getting that today. It would not let me log in. I thought it was an issue just effecting Firefox though, because when I tried chromium is worked. And more, the login suddenly also worked in Firefox right after.
Hey folks, our apologies for the trouble. We’re trying out a new CAPTCHA that is more performant than the one we had and should make the site faster when we’re done.
For now, we’ve rolled it back until we can do further testing on certain endpoints it’s been misbehaving on.
The issue you’re having with placing an order sounds potentially different, please write into Framework Support with more details and we’d be glad to assist!
Hello everyone, thank you for reaching out and apologies for the issues you were having. I know it can be frustrating when getting blocked using just trying to use the site. Like Zach said, we’re constantly improving and the updates to our CAPTCHA system will make for a more performant site.
After some testing we’ve rolled out some changes to our CAPTCHA. If you have any issues, like not being able to log in after multiple attempts and seeing the “Captcha verification failed, please try again.” message, please reach out. I’ll be monitoring this thread and will try to troubleshoot anything that comes up related to this issue.
Thank you to everyone in this thread for your patience and help with making the site better for all of our users.
This whole captcha thing is weird. Captcha should only be used when logging in to prevent brute force attacks on login attempts. Why was/is your site sending me a captcha for just opening the site? That is a major usability degradation and abuse of the captcha idea. Imagine if every website did that when you simply opened it to view its contents.
Was it just some catastrophic misconfiguration mistake?
This is a valid concern, and you’re right in that it’s not ideal to have a CAPTCHA show up just for opening the site. That was not intentional and may have been triggered from via bot protection rules. We’ve currently reconfigured it to use “invisible” mode, so you shouldn’t see the widget at all.
CAPTCHA is often associated with login forms, but it’s also used widely on other public web forms such as contact, account sign-up, and newsletter to prevent automated spam and abuse. We have found it useful in protecting our web forms, along with other methods. That said, we’re always trying to balance protection with usability, so your feedback is very much heard and appreciated.
Having recently changed to the Cloudflare CAPTCHA on a Wordpress site I can safely say it is much better at rejecting bots/scanners.
Unlike the older CAPTCHA, Cloudflare’s has lots of promise to more intelligently identify bad actors. Something else might be conflicting with the calls to satisfy the CAPTCHA routine and then Cloudflare’s CAPTCHA turning it to false positive.
Unfortunately it is a best practice to implement a defensive strategy anytime there is input coming back from a webpage (i.e. a form) these days. That is a starting point for a lot of exploits these days. Thanks for keeping an eye out! We applaud the hard work the Framework team is always doing to make sure things work right the first time.
I was getting it on every single page load previously. Looks like whatever you changed, now causes it to captcha on the first page load in a day? I got it once yesterday, then got it again the first time I opened my browser today (I have a framework tab pinned in the browser).
In my mind, even once a day to just load the page is too much. This is the captcha that always pops up, preventing me from seeing the page until I manually click that box: