Jump to content

"Csrfkey" also present in the grid or list links of the store


Recommended Posts

Regarding this discussion:


I don't want to be boring and I know that you have solved this part in the version that will be released (4.7.19).

I want to ask you if the change will only concern the currency change.

Because today I discovered that the parameter "&csrfKey=" is also present in the links in the store to change the type of display (grid or list):

Could contain: File, Webpage

These links are also present in hundreds of thousands in Search Console:

Could contain: Page, Text

I sent this message only to confirm that this part is also solved after the update because in the previous topic we only talked about the links related to the "currency change".

Thanks.

Link to comment
Share on other sites

Unfortunately adding only to robots.txt is a solution that doesn't work, Google generates infinite URLs distorting the real results, furthermore the pages generated are infinite, this will never end.

For now I have solved it by modifying the template code, hiding the currency exchange for guests, I will have to do the same thing for the store display selector.

I hope that in the next update it will be resolved permanently and not through Robots...

I hope so, thanks.

Link to comment
Share on other sites

Sure, I will remove the changes after the update, bringing the template back to the original.

Now I found a third element with the same problem:

In the "activities" page (/discover), the button that changes the view between Condensed/Expanded.

Could contain: File, Webpage, Page, Text

Link to comment
Share on other sites

3 minutes ago, modman said:

Sure, I will remove the changes after the update, bringing the template back to the original.

Now I found a third element with the same problem:

In the "activities" page (/discover), the button that changes the view between Condensed/Expanded.

Could contain: File, Webpage, Page, Text

Added a bug report

Link to comment
Share on other sites

 

 

Even if there is "nofollow", the problem remains.

Now the links look like this, generating infinite numbers:

  1. https://www.etpsolutions.com/discover/unread/?view=condensed&csrfKey=345f5297003cc7f3c067afbxxxxxxxxxx
  2. https://www.etpsolutions.com/discover/unread/?view=condensed&csrfKey=345f5297003cc7f3c067afbyyyyyyyyyy
  3. https://www.etpsolutions.com/discover/unread/?view=condensed&csrfKey=345f5297003cc7f3c067afbccccccccc

The correct link should look like this:

  1. https://www.etpsolutions.com/discover/unread/?view=condensedss

As demonstrated above, after updating IP.Board, Google is going crazy, it finds infinite pages that will increase more and more, by analyzing the existing ones (because the whole site NEVER ends) and distorting all the statistics that I would need to analyze the real data:

 

 

Could contain: Chart

Could contain: Page, Text

Link to comment
Share on other sites

we don't understand each other, have you seen my google graphs that continue to rise endlessly? why not remove that csrfkey parameter and make all those numbers disappear from the statistics…. we've already discussed it a lot in previous posts... I seem to have understood that this will be resolved in the next update 4.1.19, that's fine.

Link to comment
Share on other sites

12 minutes ago, modman said:

we don't understand each other, have you seen my google graphs that continue to rise endlessly?

We understand each other, but we're not on the same page!

It's intended and fine that not literally any page which is returned by our community software is indexed by google!

Please see also https://support.google.com/webmasters/thread/202184638/do-i-need-to-fix-all-pages-that-aren-t-indexed-aka-page-indexing-issues?hl=en

 

Link to comment
Share on other sites

your point is valid if the URLs are definitive, not indefinite, this maintains the tilt, do you think Google will be able to continue dedicating time to a site that generates random URLs?
 

why not remove that parameter as in all the site's crime and in all the remaining existing CMS in the world?

Link to comment
Share on other sites

3 hours ago, modman said:

your point is valid if the URLs are definitive, not indefinite, this maintains the tilt, do you think Google will be able to continue dedicating time to a site that generates random URLs?

I'm not quite sure what you mean here, the no index tags and robots.txt actually play by Google's rules and are fine.

3 hours ago, modman said:

why not remove that parameter as in all the site's crime and in all the remaining existing CMS in the world?

A CSRF key is pretty standard practice.

Link to comment
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...