Member access
Sign in
Submitting this form sends a POST request to /login — exactly the kind of endpoint you'd protect against credential-stuffing and foreign brute-force attempts.
On a static host nothing actually authenticates — the value here is that the
POST /login request reaches Cloudflare, so your rules fire and show up in Security Events. Test it with curl -X POST https://yourdomain.com/login.