1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.4 Forum is private and not indexed

Discussion in 'XenForo Questions and Support' started by flowerpot132, Nov 13, 2015.

  1. flowerpot132

    flowerpot132 Formerly mugtree

    Yet you can still get to images if you know the url.

    So for example right click on a resource icon and you can copy the image url. Paste that into a browser and you can see the image, even when not logged into the forum.

    Why is that? and how do you stop it please?

  2. Chris D

    Chris D XenForo Developer Staff Member

    It's impossible to prevent.

    The files for those are stored directly on the file system so if you know the URL, you can access them. This applies to attachment thumbnails too.

    This is different to full size images and attachments: these are URLs which are accessed through PHP code which does check permissions.
  3. Brogan

    Brogan XenForo Moderator Staff Member

    If the image has been uploaded to a post in a private forum, only those with permission to access the forum will be able to view it.

    Resource icons are not permission protected.
    Chris D likes this.
  4. flowerpot132

    flowerpot132 Formerly mugtree

    Ok thanks. Where else are images or icons not permission protected please?

    Also, come to think of it, any else not permission protected? Eg resources files url links maybe?
  5. Chris D

    Chris D XenForo Developer Staff Member

    As mentioned above, it's generally just non-important stuff, e.g. avatars, attachment thumbnails and resource icons.

    Everything else, resources, full size attachments etc. are not directly accessible on the file system and go through URLs which check permissions.
  6. flowerpot132

    flowerpot132 Formerly mugtree

    It is important to me, sorry. What is the full list please?
  7. Chris D

    Chris D XenForo Developer Staff Member

    That is the full list.

Share This Page