Password Protected URL Action security

Using this - I was wondering if the linked page is hidden from bots, directory searches etc?

I have a client that wants to put a company directory online, but not have this information publicly viewable or searchable.

The password would be one-for-all - many users.

The page… well, I could do it with graphics instead of HTML so the text doesn’t come up in searches - or put it in a PDF, but any other ideas to keep it private would be appreciated.

I’m not super advanced, so simple is probably better.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

The Password Protected URL Action is not secure in any sense of the word, except for Security Through Obscurity. True, the URL is not present in the JavaScript – that would be just completely foolish. But the URL is accessible if you know what it is, and that means that it is open to being leaked through the Referer header sent through the browser on every request. So if your protected page has any links on it at all, the “protected” page’s existence will be revealed if you click on a link contained on that page and navigate to another server.

Your best bet, always, is to use your hosting provider’s control panel to set an Apache Realm (often referred to as an .htaccess password) to keep out people who don’t know the password. This will keep out bots and crawlers, as well as determined humans.

Walter

On Apr 29, 2013, at 5:34 PM, Karen E wrote:

Using this - I was wondering if the linked page is hidden from bots, directory searches etc?

I have a client that wants to put a company directory online, but not have this information publicly viewable or searchable.

The password would be one-for-all - many users.

The page… well, I could do it with graphics instead of HTML so the text doesn’t come up in searches - or put it in a PDF, but any other ideas to keep it private would be appreciated.

I’m not super advanced, so simple is probably better.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Thanks Walter, that’s what I thought but wanted to make sure. I appreciate your explanation and sage input and will go the .htaccess route.

Thanks again!

Karen


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options