Thanks @Paul E., I appreciate you trying, but this is too complicated.

Not sure why IPS would remove the version from the footer due to it being a security issue, but then create a file that shows when I updated from every version and what version I am currently on, and make this viewable to all.  Why not stick it in the database?

Anyhow it's been there for years and my site is still around, I'll just leave it.

 

That is pretty cray. Why is that a thing? Does something rely on that file?

You can block access to .json files via htaccess

<Files "*.json">
    Order Deny,Allow
    Deny from all
</Files>

or only for "versions.json"

<Files "*versions.json">
    Order Deny,Allow
    Deny from all
</Files>

 

It's still not fixed even in 4.6.x 😞

https://invisioncommunity.com/applications/core/data/versions.json
https://invisioncommunity.com/applications/core/data/theme.xml

.htaccess rule for all xml and json files:

<FilesMatch "\.(xml|json)$">

    Order Deny,Allow

    Deny from all

</FilesMatch>

Edited April 16, 20214 yr by Mr 13