Hiding profile pages from search engines
Permalink
I have a client that has a member directory set up with private members. I have the permissions set up on the member directory page to only be viewable by members and that works fine. The problem is the actual profile page of the members themselves are showing up viewable to guests and accessible via search engines. The profile page itself doesn't show up in the page manager.. So I'm not sure where I would change the permissions on those pages without having to visit each one individually and change them manually. There are 1000 members so that wouldn't even be an option.
Please help!
Please help!
Thank you. I was able to find the profile page... But guest isn't checked off on the page... Even though its seems to be accessible via all of the search engines.
So Guest does not have view access on Profile, but can still reach it? Have you cleared your site cache since the permission change?
That's what I'm saying.. I didn't change any permissions. GUEST was already unchecked on that page.
Anybody? This is apparently private information the client doesn't want out there and at the moment my only option is to go into all 1000 members individually and change the profile pages permissions..
If you would like me to, I could take a look at your permissions settings. I need access to your site, though, and I completely understand if you are not willing to give it.
After looking through your site I think I have found your problem. The biggest issue here is the fact you are on version 5.4.1.1 which had some major flaws.
These are from the release notes of 5.4.2:
The good thing is all your permissions seems correct, and in fact so strict users can't see their own profiles. Guests can't reach the 'Members' page listing all members or individual profiles pages (this I have tested as Guest). I don't know how someone else might reach them, but I didn't manage to - and I tested both '/profile/view/1' and cID= (a number I can't remember now). It could be related with a session not being cleared correctly (which was also fixed in the 5.4.2 release).
So, my suggestion is this:
Create a complete backup of your database and files.
Install concrete5 v. 5.4.1.1 on another server.
Import your backed up files and database and test the functionality (so you know everything is correct).
Update to 5.4.2.2 and test everything again. You might need to do some changes here and there, and also update some add-ons (but make sure the updates are for 5.4.2.2).
Once you are satisfied with your development upgrade, and all your notes are in order, you can export the database and files (for backup) and go to your live site and do the upgrade. You can then import the files from your dev server and also import your database from your dev server.
Now, normally I would recommend going further and upgrade to 5.5.2.1 and then to 5.6.0.2, but since your site heavily relies on the scrapbook (which is deprecated since 5.5) you will run into troubles. You could, of course, test it on your dev server just to see how much work would be requiered.
Anyways, I know this might not have been the answer you were looking for, but it is the best I can do. Hopefully you will get this done, but I estimate it will take somewhere between four and six hours to go from 5.4.1.1 to 5.4.2.2 if you already have your development environment set up. To go from 5.4.2.2 to 5.5.2.1 will probably take somewhere between 30 and 40 hours in your case (=estimates).
Good luck, and I really hope you are able to get this done, because the site needs it since it is a well known and used site.
These are from the release notes of 5.4.2:
- Fixed bug with "exclude from search index" not working (http://www.concrete5.org/developers/bugs/5-4-1-1/exclude-from-search-index-attribute-has-no-effect/) - Important auto-updated related security updates. Please install this update
The good thing is all your permissions seems correct, and in fact so strict users can't see their own profiles. Guests can't reach the 'Members' page listing all members or individual profiles pages (this I have tested as Guest). I don't know how someone else might reach them, but I didn't manage to - and I tested both '/profile/view/1' and cID= (a number I can't remember now). It could be related with a session not being cleared correctly (which was also fixed in the 5.4.2 release).
So, my suggestion is this:
Create a complete backup of your database and files.
Install concrete5 v. 5.4.1.1 on another server.
Import your backed up files and database and test the functionality (so you know everything is correct).
Update to 5.4.2.2 and test everything again. You might need to do some changes here and there, and also update some add-ons (but make sure the updates are for 5.4.2.2).
Once you are satisfied with your development upgrade, and all your notes are in order, you can export the database and files (for backup) and go to your live site and do the upgrade. You can then import the files from your dev server and also import your database from your dev server.
Now, normally I would recommend going further and upgrade to 5.5.2.1 and then to 5.6.0.2, but since your site heavily relies on the scrapbook (which is deprecated since 5.5) you will run into troubles. You could, of course, test it on your dev server just to see how much work would be requiered.
Anyways, I know this might not have been the answer you were looking for, but it is the best I can do. Hopefully you will get this done, but I estimate it will take somewhere between four and six hours to go from 5.4.1.1 to 5.4.2.2 if you already have your development environment set up. To go from 5.4.2.2 to 5.5.2.1 will probably take somewhere between 30 and 40 hours in your case (=estimates).
Good luck, and I really hope you are able to get this done, because the site needs it since it is a well known and used site.
Sent from my iPad
See attached screen shot. Same applies to advanced permissions.
Don't forget to have a robots.txt and sitemap.xml file in your web root so the search engines knows what to crawl and how.