OpenCart, Apache Server and Clouldflare Secuirty and Blance FIX
Budget: $30 – $250 USD
I need a server tech who will correctly set entire balance between OpenCart Version 3.0.4.0 site and AlmaLinux v8.10.0 STANDARD standard via Cloudflare Pro. We have no traffic due to collision or Server and Opencart. This site is optimized, loads well no issues but setting is way off.
1. Security Headers Fix: Site is not hitting Apache directly because Cloudflare Pro keeps blocking -
We are getting a 403 from Cloudflare edge with Security Headers that we set in htaccess and Cluldflare is blocking them server response.
[root@server2 ~]# curl -I https://domain.com HTTP/2 403 date: Wed, 22 Apr 2026 17:45:47 GMT content-type: text/html; charset=UTF-8 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT referrer-policy: same-origin x-frame-options: SAMEORIGIN report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GrZ2YVR9gbItHKyr7nju6r%2FXex%2BK%2B44J9avtxXyWetnMhls0zaTg7OxaIvhMtnQM4aWgKX3hT%2BqDa13I926hV1Vihu61kUUB9QWhz6AiIdS56UXgfpXSqdy%2FJZd5pz1zbw%3D%3D"}]} nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} server: cloudflare cf-ray: 9f0671b6fa0468f1-PDX alt-svc: h3=":443"; ma=86400
2. Occessid Cookies Problem - set-cookie OCSESSID=7af34436043b4bb2ca49fb8cda; path=/
3. Check Cloudflare Pro and even we have security set to low it keeps blocking everything so they do not block google (I have Bots OFF, Hot Links OFF), check all the WAF settings we have set.
4. Install on the server Immunify 360 ($12 monthly version)
5. Upgrade Php Ini Universal Manager since PHP 7.2, PHP 7.3, PHP 7.4, and PHP 8.0 reached EOL end of life.
6. Fix Cloudflare 5XX Errors - Server issues if shortens the signal if any since that could be an issue as well.
7. TTFB issues with Apache and Cloudflare Running fix that.
8. Cashe Control Headers - set them correctly so google grabs pages and indexes them. We have them set but not sure if correctly set.
9. Email - we use zoho email that routes from the site, but lately we been getting error since something has switched there, email hits the site and loops in circles.
10. Check entire server Firewall (we have all the IP set for clouldflare but who knows is something is blocking it) set up a balance for cashe, security so we have no more issues with that site.
11. Check SSL we have via clouldflare that is set.
12. http to https, www to one www. (domain was set as .domain.com - and that is how it is set.
1. Security Headers Fix: Site is not hitting Apache directly because Cloudflare Pro keeps blocking -
We are getting a 403 from Cloudflare edge with Security Headers that we set in htaccess and Cluldflare is blocking them server response.
[root@server2 ~]# curl -I https://domain.com HTTP/2 403 date: Wed, 22 Apr 2026 17:45:47 GMT content-type: text/html; charset=UTF-8 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT referrer-policy: same-origin x-frame-options: SAMEORIGIN report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GrZ2YVR9gbItHKyr7nju6r%2FXex%2BK%2B44J9avtxXyWetnMhls0zaTg7OxaIvhMtnQM4aWgKX3hT%2BqDa13I926hV1Vihu61kUUB9QWhz6AiIdS56UXgfpXSqdy%2FJZd5pz1zbw%3D%3D"}]} nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} server: cloudflare cf-ray: 9f0671b6fa0468f1-PDX alt-svc: h3=":443"; ma=86400
2. Occessid Cookies Problem - set-cookie OCSESSID=7af34436043b4bb2ca49fb8cda; path=/
3. Check Cloudflare Pro and even we have security set to low it keeps blocking everything so they do not block google (I have Bots OFF, Hot Links OFF), check all the WAF settings we have set.
4. Install on the server Immunify 360 ($12 monthly version)
5. Upgrade Php Ini Universal Manager since PHP 7.2, PHP 7.3, PHP 7.4, and PHP 8.0 reached EOL end of life.
6. Fix Cloudflare 5XX Errors - Server issues if shortens the signal if any since that could be an issue as well.
7. TTFB issues with Apache and Cloudflare Running fix that.
8. Cashe Control Headers - set them correctly so google grabs pages and indexes them. We have them set but not sure if correctly set.
9. Email - we use zoho email that routes from the site, but lately we been getting error since something has switched there, email hits the site and loops in circles.
10. Check entire server Firewall (we have all the IP set for clouldflare but who knows is something is blocking it) set up a balance for cashe, security so we have no more issues with that site.
11. Check SSL we have via clouldflare that is set.
12. http to https, www to one www. (domain was set as .domain.com - and that is how it is set.
Related categories:
PHP
Linux
Web Security
Apache
Open Cart
Security
Website Optimization
Cloudflare
Firewall
SSL