HomeHomeDotNetNuke Forg...DotNetNuke Forg...Module ForumsModule ForumsDocumentsDocumentsProtected documents indexed by GoogleProtected documents indexed by Google
Previous
 
Next
New Post
2/23/2009 7:33 PM
 

Hi,

I have a page with documents which should only be available to registered users, one of the users googled his name and got a link directly to the Word document

http://www.jciwestbrabant.be/LinkClick.aspx?fileticket=KdIA%2B6GhZuA%3D&tabid=58&mid=406

How can I prevent this document to be accessible or to be indexed?

This is serious security issue.

Thx for you help.

Grtz,

Walter

 
New Post
2/23/2009 9:54 PM
 

 Hi Walter,

You might want to check the folder permissions for the folder first.  If the folder security is set to All Users, that's likely the culprit.  I would suggest you create a folder with special permissions where you can set this.  If you set a folder, you can also set a robot.txt file to completely ignore that directory, which will help prevent indexing.

For the time being, you may want to remove the file if it is a security risk.


-- Scott Allender
http://www.scottallender.com
 
New Post
2/24/2009 3:55 AM
 

Walter,

besides, your document stored in an unsecure folder (in Admin :: File manager displaying a folder icon, not a lock) are always accessible by using the file path. Create a secure folder (file system) and store your files inside to provide unauthorized access.


Cheers from Germany,
Sebastian Leupold (DotNetNuke MVP)

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group   European Network of DotNetNuke Professionals

 
Previous
 
Next
HomeHomeDotNetNuke Forg...DotNetNuke Forg...Module ForumsModule ForumsDocumentsDocumentsProtected documents indexed by GoogleProtected documents indexed by Google


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

Attend A Webinar
Start  Professional Edition Trial
Have Someone Contact Me

Like Us on Facebook Join our Network on LinkedIn Follow DNN Corporate on Twitter Follow DNN on Twitter

Advertisers

Sponsors

DotNetNuke Corporation

DotNetNuke (DNN) provides a suite of solutions that make designing, building and managing feature-rich sites and communities fast, easy and cost-effective. The DotNetNuke Platform CMS is the foundation for more than one million websites worldwide. DNN Social, our newest solution, enables businesses to create immersive, interactive communities. Thousands of organizations like True Value Hardware, Bose, Cornell University, Glacier Water, Dannon, Delphi, USAA, NASCAR, Northern Health and the City of Denver have leveraged DNN to deploy highly engaging business- critical websites. Our rapid growth in product sales and deployments resulted in DotNetNuke Corp. being named one of the fastest growing private companies in America by Inc. Magazine in 2011 and 2012.