On client magento website has enabled google captcha version 2 on create account page.

exception.log file has following errors

(Magento\\Framework\\Stdlib\\Cookie\\CookieSizeLimitReachedException(code: 0): Unable to send the cookie. Size of 'mage-messages' is 4131 bytes with error message "Invalid google captcha"

Above error happening because attacker try to create account using script 100 times and every time it invalidate google captcha and throw error message, and Magento messages associated with cookies, because of lot of error messages store in cookie, cookies become full in memory and run above exception.

Can I handle without request limit access concept? what should I do?

1 Answer 1


As a suggestion, I recommend using Cloudflare CDN. It has the ability to detect and prevent attacks at the DNS level. Have a look at https://www.cloudflare.com/en-gb/application-services/products/

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.