Hi Dave (SOD) and John – Journeyman,
I am going to stick my neck out now in making the following comments:
Until reading John – Journeymans comment #678351 on the other related thread, I was not aware that this new forum was based on WordPress. Now that I am aware of that, many of the issues raised make more sense.
Per my understanding, WordPress is one of the most popular bits of kit out there for building sites. As it is very popular, it attracts more spam/bots trying to get in.
To the best of my knowledge, WP has been used to build this site only. Other sites such as RCME do not appear to be using WP.. but I may be wrong.
As WP is popular and prone to higher level of spam/bot traffic, perhaps this site developers suddenly found themselves overwhelmed (as they did not see this with the other sites they manage which do not use WP), resulting in their implementing the use of CF, which is a fair approach.
However, per my understanding:
a. If the latest version of WP is used and regularly updated along with a certain level of security, then the level of exposure to spam/bots is reduced.
b. John-Journeyman, as well as Dave – SOD referred to plug-ins. Most of WP is based on Pugins. So here is a quote, which is in line with what I am also aware: ‘So you might pickup a plugin from the WordPress Plugin Directory, find out you need a special feature that is only available in the paid version and pay for it from the third party market, where the full featured plugin has more security holes than Swiss cheese.’ source: https://www.keepsecure.ca/blog/5-important-reasons-why-you-should-not-use-wordpress-for-your website/#:~:text=The%20number%20of%20spam%20comments,websites%20are%20hacked%20by%20bots.
I am not saying that WP should or should not have been used.
c. If you are working with latest version of WP, is the Plugin you are using up to date with the latest version?
So, debugging with CF in place is likely to add to the instability.
Ketan at ARC