XF 1.4 Guests can see things they shouldn't...

[Chassey Group]

Does anyone know why guests are seeing areas that they shouldn't be? I've tested & logged out, and I can't see these areas. Yet we keep having unregistered guests that can be seen viewing these private posts. You can see that the 5 IP's that are similar are all viewing the same private area.

 

[TPerry]

Looks like most of those 150.70.xxx.xxx appear to be bots... or at least several of them I checked have been reported to be a bot.

 

[Mr Lucky]

Surely a bot still has to follow guest permissions?

 

[Paul B]

They do.

It's possible those links were previously available and have been indexed, or have been posted on a social network, etc.

If the threads are not visible to guests then there is nothing to worry about.

 

[Chassey Group]

Oh thank you! That is possible as we did adjust some permissions after they had opened the groups. As long as they aren't indexing that content, we are good.

 

[Snog]

Since this involves my add-on I'll chime in here...

Keep in mind that content of the thread may have been indexed prior to your changing the group permissions. But any attempt to index it in the future will be met with a permission error.

 

[Chassey Group]

The same robot is back today. I really don't understand robots, yet. Is there any reason to block this robot (or can I even?)? I'm worried our members will see this & assume like we did that someone outside of their group is viewing their threads.

Their IP: The number of this IP address is 150.70.97.99. The country of this IP address registration is Japan. IP Country code is JP. ISP of this address is "Trend Micro Incorporated", organization is "Trend Micro Incorporated". It's hostname is 150-70-97-99.trendmicro.com. IP address latitude is 36.0 and longitude is 138.0.

 

[Snog]

I believe if you add this above the standard XF rewrite conditions (between RewriteEngine On and the first RewriteCond) to your .htaccess file it will block trendmicro...

RewriteCond %{HTTP_USER_AGENT} trendmicro [NC]
RewriteRule ^.*$ - [F]

If that's not correct, I'd appreciate it if someone could correct it.