Additional considerations when selling.
EVERYTHING FROM THE STANDARD CONFIGURATION
Plus the following.
NEVER CACHE
Cart, checkout, account and any personalised page.
Serving one customer's cart to another is the most serious failure possible here.
Configure this explicitly rather than trusting defaults.
PAYMENT CALLBACKS
Your gateway sends automated requests confirming payment. A firewall rule or a challenge blocks them.
The symptom is payments succeeding and orders staying unpaid.
Create a rule allowing requests to the callback path.
Test a real transaction after any Cloudflare change.
VISITOR IP ADDRESSES
Your shop sees Cloudflare's addresses unless configured otherwise.
Fraud screening that sees every order from one address cannot work. Install the plugin that restores real addresses.
DURING SALES PERIODS
Cloudflare absorbs the spike at the edge, which is a genuine benefit.
Confirm the configuration is correct before the peak, not during it.
TESTING AFTER ANY CHANGE
Place a real low-value order, as a guest, on a phone. Confirm it completes and the order updates.
