Prevent index.php/my-profile by non site users from seeing site profiles

  • Resolved sailingmike49

    (@sailingmike49)


    4 years, 1 month ago

    I have found that anyone using “domain_name”/index.php/my-profile/ + numbers can see site user profiles despite these being unticked in the settings?
    This is a concern as user profiles have their personal data thus visible and is bad for GDPR compliance.
    Anyone had this occur in UM before?

Viewing 4 replies - 1 through 4 (of 4 total)

  • You can on your pages, on the “Account” page, and set who can see the profile page.

    Thread Starter sailingmike49

    (@sailingmike49)

    I’ve now renamed the UM folder in the database to ultimate-member.
    Now I find the login page is “page not found” despite the UM Login page and shortcode is correct?

    Thread Starter sailingmike49

    (@sailingmike49)

    I see the Account settings will allow for instance only logged in users or everyone to see the site.
    I want to stop people who are not site members from using “index.php/my-profile/” in Google to see user profiles and I cant see how you do that using the “Account” page

    Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @sailingmike49

    Sorry for the late response.

    What’s your permalink structure?
    Please go to WP Admin > Settings > Permalinks.

    You could also try using a third-party plugin to block the search engine to crawl that page.

    Feel free to re-open this thread by changing the topic status to “Not Resolved” so that we can get back to you.

    Regards,

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Prevent index.php/my-profile by non site users from seeing site profiles’ is closed to new replies.