phpgroupware-tracker
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-tracker] [bug #5997] Login page get's indexed by search en


From: nobody
Subject: [Phpgroupware-tracker] [bug #5997] Login page get's indexed by search engines
Date: Fri, 17 Oct 2003 04:43:02 -0400
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030618 Debian/1.3.1-3

=================== BUG #5997: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5997&group_id=509

Changes by: Dave Hall <address@hidden>
Date: Fri 10/17/03 at 18:43 (Australia/Melbourne)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | None                      | Fixed
              Status | Open                      | Closed
     Reproducibility | None                      | Every Time


------------------ Additional Follow-up Comments ----------------------------
This has been corrected in CVS.



To grab a complete update of all fixes:



1)  Check to see if you have cvs installed: 'cvs --help'.

1a) If not, install a copy of cvs-cli from your favorite 

distro.



2)  Then just type:

    'cd <your phpgroupware dir>; cvs update -dP'.



You can do step 2 as many times in a day as you wish, and 

will always get the most current bug fixes.



Thanks,





=================== BUG #5997: FULL BUG SNAPSHOT ===================


Submitted by: cw                      Project: phpGroupWare                 
Submitted on: Fri 10/17/03 at 01:18
Category:  API - phpGWapi             Bug Group:  0.9.16RC1                 
Severity:  9 - Critical               Priority:  None                       
Resolution:  Fixed                    Assigned to:  skwashd                 
Status:  Closed                       Component Version:  None              
Platform Version:  None               Reproducibility:  Every Time          

Summary:  Login page get's indexed by search engines

Original Submission:  The login page can show up on Google ( 
http://www.google.com/search?q=inurl:/groupware/+-+Login ) and allow potential 
hackers an easy way to know if you're running a certain version of phpgw.



the following patch #2092 adds <META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"> 
to the login page templates which should prevent most search engines from index 
the login page.  I think the login page is only page at risk here since normaly 
other pages can't be deep linked into, and in the cases where they can you 
probable do want them indexed.



http://savannah.gnu.org/patch/index.php?func=detailpatch&patch_id=2092&group_id=509



Follow-up Comments
*******************

-------------------------------------------------------
Date: Fri 10/17/03 at 18:43         By: skwashd
This has been corrected in CVS.



To grab a complete update of all fixes:



1)  Check to see if you have cvs installed: 'cvs --help'.

1a) If not, install a copy of cvs-cli from your favorite 

distro.



2)  Then just type:

    'cd <your phpgroupware dir>; cvs update -dP'.



You can do step 2 as many times in a day as you wish, and 

will always get the most current bug fixes.



Thanks,



-------------------------------------------------------
Date: Fri 10/17/03 at 06:36         By: skwashd
Will apply this one today.  I was thinking something similar.  I will also 
change the sitemgr header to not include the phpGW version.


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5997&group_id=509

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/





reply via email to

[Prev in Thread] Current Thread [Next in Thread]