Suggestion : Hide followers lists from guests

[Qubabos]

I notice that sometimes googlebot try to fetch urls with lists of followers in topics, files and articles, for example :

http(x)://siteurl.com/notifications/?do=followers&follow_app=forums&follow_area=topic&follow_id=*
http(x)://siteurl.com/notifications/?do=followers&follow_app=downloads&follow_area=file&follow_id=*
http(x)://siteurl.com/notifications/?do=followers&follow_app=cms&follow_area=records1&follow_id=*

It would be great to add there an noindex tag on those url's and limit those only to registered members and hide them from guests ? I can't see a reason why those informations should be public visible ? Maybe solution is to throw noindex tag as search/tags urls :

and http 403 with this :

[opentype]

15 minutes ago, Qubabos said:

limit those only to registered members and hide them from guests ?

Pretty sure that is the default behavior. Do you have an example where it doesn’t work this way? It might just be a theme problem for example. 

[Adriano Faria]

Nope, guests can see followres. Try it as a guest: https://invisioncommunity.com/notifications/?do=followers&follow_app=forums&follow_area=topic&follow_id=429239

[Qubabos]

@opentypenope, this is not a theme issue. @Adriano Faria - exactly those  Followers can bee seen by guests not only on topics but article categories, database records :

https://invisioncommunity.com/notifications/?do=followers&follow_app=downloads&follow_area=file&follow_id=8829

and files : 

https://invisioncommunity.com/notifications/?do=followers&follow_app=downloads&follow_area=file&follow_id=8829

I dont see a good reason why this should be public visible. 

22 minutes ago, opentype said:

Pretty sure that is the default behavior.

It should be or admins should have a tool to limit those.

[opentype]

11 minutes ago, Adriano Faria said:

Nope, guests can see followres. Try it as a guest: https://invisioncommunity.com/notifications/?do=followers&follow_app=forums&follow_area=topic&follow_id=429239

I see. I think it’s tied to the profile permissions. If guests can see profiles, they also can also access them from the following list. I have that turned off on most of my sites and the links are suppressed in this case. Makes sense to me. 

[Adriano Faria]

1 minute ago, opentype said:

I think it’s tied to the profile permissions. If guests can see profiles, they also can also access them from the following list.

Nope, tried that before posting here.

[Qubabos]

It's tied to notification list ( urls points to this) - my guests can't see profiles and can access to followers lists...

[Qubabos]

sadly IPS support team doesnt see an issue here :

Quote

Hello,

As mentioned, you would need to post that within our feedback forum if you wish to see changes in this area. Our support area is for issues with the software in its current form, rather than suggestions

anyway - @Adriano Faria i see opportunity here for a nice plugin  challenge accepted? mos def will pay for this  

[opentype]

7 minutes ago, Qubabos said:

It's tied to notification list ( urls points to this)

Where is that set?

I cannot access notifications as guests on any of my sites, nor are there links to followers on topics. So there must be a permission setting to solve this somewhere …

 

[Adriano Faria]

IPS\core\modules\front\system\notifications::followers(). The problem is that IPS uses the _checkLoggedIn method in all others methods except followers().

14 minutes ago, Qubabos said:

sadly IPS support team doesnt see an issue here :

anyway - @Adriano Faria i see opportunity here for a nice plugin  challenge accepted? mos def will pay for this  

Accepted:

@Qubabos, drop a PM if you want to make adonation.

 

[Qubabos]

12 minutes ago, opentype said:

So there must be a permission setting to solve this somewhere …

there is no such  

11 minutes ago, Adriano Faria said:

drop a PM if you want to make adonation.

 thanks, will do but suddenly support staff woke up and said that :

Quote

Thank you for providing your feedback. Your suggestion will be evaluated and assessed for a future release.

 

[Adriano Faria]

The plugin is in the marketplace, anyway because I know what FUTURE RELEASE means here.

 

[Qubabos]

@Adriano Faria can you provide any link ? donation definitly has a go  

[Adriano Faria]

2 minutes ago, Qubabos said:

@Adriano Faria can you provide any link ? donation definitly has a go  

Just sent you a PM.

[opentype]

20 hours ago, Qubabos said:

there is no such  

Ah, sorry. I finally see the misunderstanding. You were talking about the links to the list, I was talking of what happens on that list – which is that the profile entries are linked or not linked depending on the profile permission settings. I see your point now – though I am not very bothered by it, since usernames are shown anyway all over an IPS community, like in the topics itself.