Notifications
Clear all

wpForo 1.x.x [Closed] Protect uploaded files from access through Google

9 Posts
2 Users
1 Reactions
1,194 Views
Posts: 8
Topic starter
(@kusje-erop)
Active Member
Joined: 6 years ago

How do I prevent the uploaded files from being found on Google and accessed without being logged in? I just found out that even though I set the restrictions to only registered members to have access to the forum, you still could see some of the topics without being logged in. Which was weird in itself. But I managed to fix that by making the shortlink a restricted page in Wordpress. But now if I search for members of my organization in google, I can find an uploaded xls-file that contains everyone’s personal information. Without having access to the forum. Can anyone help me? 

8 Replies
Robert
Posts: 10591
Admin
(@robert)
Support Team
Joined: 9 years ago

You can stop search engines indexing your attachments using a simple command in robots.txt file of your website root directory. Just put these links in the robots.txt file:

User-agent: *
Disallow: /wp-content/uploads/wpforo/default_attachments/
Disallow: /wp-content/uploads/wpforo/attachments/

More info in this article:

https://www.hostinger.com/tutorials/website/how-to-block-search-engines-using-robotstxt

2 Replies
(@kusje-erop)
Joined: 6 years ago

Active Member
Posts: 8

Thank you for the reply. Can I stop search engines indexing the whole forum this way as well?

But I understand that, even if I use this solution, if you have the link you can still access it without being a member? That's what I find so strange. As it contains personal info like addresses and phone numbers I don't want anyone other than members to access it. 

Robert
Admin
(@robert)
Joined: 9 years ago

Support Team
Posts: 10591
Posted by: Kusje erop

Thank you for the reply. Can I stop search engines indexing the whole forum this way as well?

Yes, you can.

But I understand that, even if I use this solution, if you have the link you can still access it without being a member? That's what I find so strange. As it contains personal info like addresses and phone numbers I don't want anyone other than members to access it. 

Please show one example of private topic that can be accessible for guests. There is no way to access to well configured private topics, or topics of private forums.

Posts: 8
Topic starter
(@kusje-erop)
Active Member
Joined: 6 years ago

So I tried the stop indexing thing, created a robots.txt with the code in it. But it stills shows up in Google. I deleted my cookies, thinking that might be the thing that made it still show up, and even used another browser, but it's still there... 

1 Reply
Robert
Admin
(@robert)
Joined: 9 years ago

Support Team
Posts: 10591
Posted by: Kusje erop

So I tried the stop indexing thing, created a robots.txt with the code in it. But it stills shows up in Google. I deleted my cookies, thinking that might be the thing that made it still show up, and even used another browser, but it's still there... 

Google is not interactive. Images are not removed live-time (real-time). You should request google to remove them or wait for a while.

Posts: 8
Topic starter
(@kusje-erop)
Active Member
Joined: 6 years ago

I removed the files that showed up in Google and sent a request for removal, as it can't be accessed by clicking it, but is still viewable in the cache. Only thing that still won't work is removing it from the Google Search. 

But the fact remains that if I have the link to a file on the forum, I can get access to it, even when I'm not logged in.

1 Reply
Robert
Admin
(@robert)
Joined: 9 years ago

Support Team
Posts: 10591
Posted by: Kusje erop

But the fact remains that if I have the link to a file on the forum, I can get access to it, even when I'm not logged in.

Nobody knows the name of your attachments. It's not an easy task to find even one single image URL.

Posts: 8
Topic starter
(@kusje-erop)
Active Member
Joined: 6 years ago

Well, I've followed the instructions AND made the robots.txt file. But the files are still showing up in Google when doing a search on a name. I don't understand how someone has to be logged in to view the content of the forum, but Google can grab its files (even with the robots.txt file) and anyone (without excess to the forum) can download it when it shows up in Google Search. 

How can I fix it?