• Resolved Jellico

    (@catsfoto1se)


    I want to make my site secure, so post that doesn’t have any links pointing to them from other pages, won’t be found or crawled, by visiting a tag page, reading some map, index or something like that. (No I don’t want password-protect the posts)

    I’ve also using a special search plug-in, where it doesn’t display posts if they are in a specific category.

    • So I’m wondering, is there any “backdoors” to access the built-in search, like example.com/?search=test (just an example)
    • Is there some kind of example.com/?tag ?
    • example.com/?category ?
    • example.com/sitemap.txt
    • Or other “hidden” functions like rss or something that can expose addressed…?
      …and how do you disable those?

Viewing 6 replies - 1 through 6 (of 6 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    WordPress is, by design, a system for sharing content. Except for requiring logins for any content on the site and then, disabling features like the REST API (which would have management side-effects) and feeds, I don’t see how you’d do it. WordPress may not be the software for your needs.

    Thread Starter Jellico

    (@catsfoto1se)

    @sterndata but I should be able to block those request via firewall?

    I’m doing a memorial page for pets, and a visitor can create a own page for their pets.
    In the progress I’m asking them if they want to be listed or not.

    I’ve made sure of that those post don’t get found it somebody searches on my site, but I need to control the “backdoors”..

    But to do that, I need to know what address, like example.com/?tags so I can block them.
    I’ve got no interest in external information exchange..

    I love the idea!

    Someone who I thought a lot of ran a national cemetery here in my hometown and when he retired he opened a pet cemetery. When my uncle retired he would help him maintain the place. When he passed on, he willed the cemetery to my aunt and uncle.

    You could block any external links or reroute those to home and a login page. That’s beyond our normal help here. You could do that with any software you might find including WordPress.

    You might want to ask this question and explain this idea (with your reasons) over at Stack Exchange where someone there might have some good ideas.

    The other sites I’ve seen that do this for pets allow external linking but might limit casual browsing or something. I think they all had search and hierarchal utilities.

    Thread Starter Jellico

    (@catsfoto1se)

    @jnashhawkins good idea, I’ll try on stackexhange.. I just thought somebody here would know the addresses that you use to see the tag, categories list, if there now are any?

    This article discusses that a bit but doesn’t stop the search engines and such from listing a link they’ll find elsewhere…

    https://yoast.com/prevent-site-being-indexed/

    There is one crawler I know of that will ignore stringent robots txt rules… IP blocking is the only way to stop that one and it’s bound to be popping up and changing IP addresses so you’ll need to be forever vigilant with watching your referrer logs.

    Thread Starter Jellico

    (@catsfoto1se)

    I added these lines to .htaccess:

    Redirect /feed/ /force404_feed
    Redirect /tag/ /force404_tag
    Redirect /category/ /force404_category

    These will simply redirect all attempts to access the rss, tag & categories.

    I’m also using the Relevanssi plug-in as replacement for WordPress own search.

    I’ve also added Ultimate Category Excluder, to prevent categories to leak..

    I’m also using Yoast seo, where I have specified what’s allowed to be in the site_index.xml

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Prevent WordPress leaking post address’ is closed to new replies.