Loophole in privacy

Also, another problem is that if you go straight to yoursite.com/searchKeyword.php, any person can search the entire site by just clicking in the search box and pressing enter without typing anything. I don't think it can be stopped. "/searchKeyword.php"

Give me so direct Matt... Need to make site as secure as possible.

Here is a link to show you how to disallow search engines via a robot.txt file
https://www.hostinger.com/tutorials/website/how-to-block-search-engines-using-robotstxt

To block them all, add this:

User-agent: * Disallow: /

I didn't see that in my site, on the signup page at the bottom is a menu however with the UNA logo on it and I'd like to remove that... my contact link also isnt working, will have to work on both I guess

what did the button look like that allowed access to the site without login or signup?

It's not a button really, but when someone that is NOT logged in, but click on the login link, it then takes you to a page that allows you to login, but at the top there is now a menu button at the top left, which then allows access to site, without being logged in. There is ways to block that from happening though by reading from previous comments made earlier in this discussion. I'm still working on this myself.

I see! THANKS! So far I don't see that on my site ! I will keep aware of it thank you! (I got the cloud hosting from una so maybe thats why the difference)

If I had pic sharing I could show you how to find it. The UNA platform defaults to the issue. Its not a server side problem. Its a setting that has to be set on the pages allowing the access.

there is something weird about how I logged in though, i will need to re-do it a few times and see what happened; it didn't accept my password then I clicked a few more times and suddenly I was logged in hmmm

I'll catch up to you soon! as a side note i figured out how to get rid of the Una link at the bottom of the page yay lol it was navigation module > footer links > una

I feel sad I am getting this done so slowly lol, but turtle wins the race i guess 😀

If I had pic sharing I could show you how to find it. The UNA platform defaults to the issue. Its not a server side problem. Its a setting that has to be set on the pages allowing the access.

Hi, when u mean picture sharing, do u mean like screenshot and then post screenshot here? Or video sharing to show others here how to perform a fix or function?

Ya... when I try to share something of that nature, it says my membership does not allow that?

Ya... when I try to share something of that nature, it says my membership does not allow that?

That may be cause of the module una has here that you need to participate on the site to accumulate points so that you can perform more actions or purchase to upgrade. 

Ya... when I try to share something of that nature, it says my membership does not allow that?

That may be cause of the module una has here that you need to participate on the site to accumulate points so that you can perform more actions or purchase to upgrade. 

Just to let u know, many of old users here never paid to perform certain functions, we just been here for a while.

Ya kinda figured. I can send pics through messenger though. So that works for now. Just a few extra steps.

Ya kinda figured. I can send pics through messenger though. So that works for now. Just a few extra steps.

I forgot at what number you should be able to share pictures, etc.....but i think at ninja level u should be able to share photos.

Ya... when I try to share something of that nature, it says my membership does not allow that?

That may be cause of the module una has here that you need to participate on the site to accumulate points so that you can perform more actions or purchase to upgrade. 

Just to let u know, many of old users here never paid to perform certain functions, we just been here for a while.

Maybe LeonidS Alexey or Andrew Boon can help you clear this up

No not UNA cloud. Using a different host. "Arvixe hosting"

It's not a loop hole nor a security issue, just need to go to Studio --> Developer --> Menus --> Items and select in first drop down box 'System'  and 2nd box 'Site'

Now for each menu item, click on the Anyone link under Visible to column and change to selected levels, Account, Standard, Moderator, Adminstrator and Premium 

Do the same thing under Developer --> Pages and change the visibility for all of those. If you do not do this, then you can still go directly to the pages by mysite.com/pages/posts-home but if you do go through and setup visibility on your site, then you will have nothing to worry about. The pages will not be listed in the menu anymore and if they type in directly the url, it will say ACCESS DENIED and nothing will be displayed.

All pages' Visibility is set to Anyone by default. It's up to us as builders to take the tools and apply them properly for our needs. Its up to us to lock it down and make it safe and secure for our members.

That's just another great feature and proof of how customizable the platform is. You can micro-manage every asset of the site.

As for the robot.txt file. Does UNA generate the txt file? I haven't found where it does or a way to add being on the UNA Cloud. I know Google "IS" still looking for it.

John Curtis You need to create the file yourself and put it in the root folder of your site.

Thanks Jeremy . That's what I figured.

Hi Jeremy!

So if I DON'T do this, and someone shares a video or link off my site,

then the non registered person will be able to view the content?

If so I think I'd like to do that at first to encourage link dropping,

then later make it locked down so only people with an account can

view the site content so that it will encourage sign ups

?

That is correct. You can do that and after a short time of exposure to  your site, then lock it down and it will say Access Denied and then they will have to sign up in order to view.

Thanks Mark. This will help with future examples.😁 

So with doing these instruction, is there a need for the Robot.txt file? Or are we good with this very simple adjustment in Developer?

I would suggest doing both considering it tackle two different issues. The Visibility being set to selected levels will ensure the page content cannot be viewed. The robots.txt file will ensure the links to the content and pages through the site cannot be indexed and also helpful in blocking the bots from indexing directories that contain scripts.

I am actually seeing the problem now, I have a menu bar at the top of my site on the sign up page that lets people into the site without signing up hmmmmm

I can't figure out how to delete it, I went to Studio -> developer as someone mentioned but I have no "developer" module ack ???

Ok after a lengthy re-install of site, I am rehashing these discussions to bring back site to its original setting and configurations. But, When doing this particular setting I do not get changes after applying. 

I have looked and tried in both developer and in navigation within studio.

You will need to download Developer module from the Apps Market. 

Studio > Apps Market > Developer > Install