[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Phpgroupware-tracker] [bug #5997] Login page get's indexed by search en
From: |
nobody |
Subject: |
[Phpgroupware-tracker] [bug #5997] Login page get's indexed by search engines |
Date: |
Fri, 17 Oct 2003 04:43:02 -0400 |
User-agent: |
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030618 Debian/1.3.1-3 |
=================== BUG #5997: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5997&group_id=509
Changes by: Dave Hall <address@hidden>
Date: Fri 10/17/03 at 18:43 (Australia/Melbourne)
What | Removed | Added
---------------------------------------------------------------------------
Resolution | None | Fixed
Status | Open | Closed
Reproducibility | None | Every Time
------------------ Additional Follow-up Comments ----------------------------
This has been corrected in CVS.
To grab a complete update of all fixes:
1) Check to see if you have cvs installed: 'cvs --help'.
1a) If not, install a copy of cvs-cli from your favorite
distro.
2) Then just type:
'cd <your phpgroupware dir>; cvs update -dP'.
You can do step 2 as many times in a day as you wish, and
will always get the most current bug fixes.
Thanks,
=================== BUG #5997: FULL BUG SNAPSHOT ===================
Submitted by: cw Project: phpGroupWare
Submitted on: Fri 10/17/03 at 01:18
Category: API - phpGWapi Bug Group: 0.9.16RC1
Severity: 9 - Critical Priority: None
Resolution: Fixed Assigned to: skwashd
Status: Closed Component Version: None
Platform Version: None Reproducibility: Every Time
Summary: Login page get's indexed by search engines
Original Submission: The login page can show up on Google (
http://www.google.com/search?q=inurl:/groupware/+-+Login ) and allow potential
hackers an easy way to know if you're running a certain version of phpgw.
the following patch #2092 adds <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
to the login page templates which should prevent most search engines from index
the login page. I think the login page is only page at risk here since normaly
other pages can't be deep linked into, and in the cases where they can you
probable do want them indexed.
http://savannah.gnu.org/patch/index.php?func=detailpatch&patch_id=2092&group_id=509
Follow-up Comments
*******************
-------------------------------------------------------
Date: Fri 10/17/03 at 18:43 By: skwashd
This has been corrected in CVS.
To grab a complete update of all fixes:
1) Check to see if you have cvs installed: 'cvs --help'.
1a) If not, install a copy of cvs-cli from your favorite
distro.
2) Then just type:
'cd <your phpgroupware dir>; cvs update -dP'.
You can do step 2 as many times in a day as you wish, and
will always get the most current bug fixes.
Thanks,
-------------------------------------------------------
Date: Fri 10/17/03 at 06:36 By: skwashd
Will apply this one today. I was thinking something similar. I will also
change the sitemgr header to not include the phpGW version.
CC list is empty
No files currently attached
For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5997&group_id=509
_______________________________________________
Message sent via/by Savannah
http://savannah.gnu.org/