bugphpGroupWare - Bugs: bug #5997, Login page get's indexed by search...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #5997: Login page get's indexed by search engines

Submitted by:  Chris Weiss <cw>
Submitted on:  Thu 16 Oct 2003 03:18:31 PM UTC  
 
Item Group: 0.9.16RC1Category: API - phpGroupware API
Severity: 6 - SecurityPriority: 9 - Immediate
Status: FixedPrivacy: Public
Assigned to: Dave Hall <skwashd>Open/Closed: Closed
Component Version: NoneOperating System: None
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Fri 17 Oct 2003 08:43:00 AM UTC, comment #2:

This has been corrected in CVS.

To grab a complete update of all fixes:

1) Check to see if you have cvs installed: 'cvs --help'.
1a) If not, install a copy of cvs-cli from your favorite
distro.

2) Then just type:
'cd <your phpgroupware dir>; cvs update -dP'.

You can do step 2 as many times in a day as you wish, and
will always get the most current bug fixes.

Thanks,

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Thu 16 Oct 2003 08:36:36 PM UTC, comment #1:

Will apply this one today. I was thinking something similar. I will also change the sitemgr header to not include the phpGW version.

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Thu 16 Oct 2003 03:18:31 PM UTC, original submission:

The login page can show up on Google ( http://www.google.com/search?q=inurl:/groupware/+-+Login ) and allow potential hackers an easy way to know if you're running a certain version of phpgw.

the following patch #2092 adds <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"> to the login page templates which should prevent most search engines from index the login page. I think the login page is only page at risk here since normaly other pages can't be deep linked into, and in the cases where they can you probable do want them indexed.

http://savannah.gnu.org/patch/index.php?func=detailpatch&patch_id=2092&group_id=509

Chris Weiss <cw>
Project Administrator

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 3 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 17 Oct 2003 08:43:00 AM UTCskwashdStatusNone=>(Error - Not Found)
  Open/ClosedOpen=>(Error - Not Found)
  ReproducibilityNone=>(Error - Not Found)

Back to the top


Powered by Savane 3.1-cleanup1