A pet peeve

I am the webmaster for my neighborhood web site. They often ask me to post special stuff for upcoming or recent events or things they want to highlight. These are things like download the form and support the constable program, or download the info or minutes from a recent meeting.

I will always post these things on the appropriate page (which is sometimes the home page) and give out the link to that page. I have even created shortcuts in the .htaccess file so that they can give out a short URL to the page which might be a few levels deep otherwise. For example, http://neighborhoodsite.org/constable and the link to the form is on the page that redirects to.

This week, I posted the minutes of a special meeting they had, and put it on the home page. Easy right? So how are they telling people to download the minutes? "Go to http://neighborhoodsite.org/Resources/SpecialMeetingMinutes.pdf " I’ve even seen them write links like that in the neighborhood newsletter, instead of the simpler stuff.

Is there a facepalm or bangs head against wall smiley on this site?


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Hi Joe,

It may be a little heavy handed but you could deny direct access to the Resources directory, again using htaccess, and only allow these to be downloaded from the web site itself.

Regards,
Tim.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

That’s another aspect of this issue that I only hinted at in my previous message, Tim. I don’t like them “giving away” the Resources directory. I may do what you suggest once I lecture them :wink: about the URLs they should be giving out. Can you refresh me on how to do it? If I knew how, I can’t recall ATM.

I also checked the latest issue of the newsletter. The constable article lists direct links for the supporter form and the vacation watch form, and they’re both wrong. They both have Resources starting with a lower case letter, and one of them has that word spelled incorrectly. :headdesk:


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Hi Joe,

Here’s a snippet of code from an .htaccess file I created last week to prevent direct access to a PHPBB form;


RewriteEngine On
RewriteCond %{HTTP_REFERER} !www.example.com [NC]
RewriteRule ^ - [F,L]

It should allow you to link to the files from the web pages but throw an error if someone tries to load the file directly.

Here’s a more complete example;

Regards,

Tim.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Thanks, Tim!


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

As long as you have (properly, for a production server) turned off directory listings (mod_index) then you won’t care if they signal the existence of /Resources, because backing out the URL to that point will just show a Not Authorized error screen.

Walter

On Oct 17, 2014, at 9:33 AM, Joe Muscara email@hidden wrote:

Thanks, Tim!


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

On 18 Oct 2014, 2:11 pm, waltd wrote:

As long as you have (properly, for a production server) turned off directory listings (mod_index) then you won’t care if they signal the existence of /Resources, because backing out the URL to that point will just show a Not Authorized error screen.

Of course, it’s always a challenge when the site is on a GoDaddy server. That wasn’t my choice.

I’m getting a 404 error for the Resources folder. Not exactly what I’d prefer but it could do.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

How is this done? Is it a “robots” tag within the meta tags dialog?

As long as you have (properly, for a production server) turned off directory listings (mod_index) then you won’t care if they signal the existence of /Resources, because backing out the URL to that point will just show a Not Authorized error screen.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

No, this is usually done in the Apache preferences, although you can also use an .htaccess file for this as well.

Options -Indexes

Walter

On Oct 20, 2014, at 11:57 AM, Doty email@hidden wrote:

How is this done? Is it a “robots” tag within the meta tags dialog?

As long as you have (properly, for a production server) turned off directory listings (mod_index) then you won’t care if they signal the existence of /Resources, because backing out the URL to that point will just show a Not Authorized error screen.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options