Archives “paypal_ipn” and “paypal_ipn_type”

Hello,
thank you for this useful plugin.

I’d like to report you an issue found analysing a website. I noticed that post type”paypal_ipn” and taxonomy “paypal_ipn_type” archives are reachable and also indexable by Google. (https://website.com/paypal_ipn/completed).

I think it is not safe and it is better to erogate a 404 on these archives.

If it can help, here the code I put temporary on my functions.php

add_action( 'wp', function() {
    if ( !is_admin() && ( is_post_type_archive( 'paypal_ipn' ) ||  is_tax( 'paypal_ipn_type' ) ) ) {
        global $wp_query;
        $wp_query->set_404();
        status_header( 404 );
        nocache_headers();
        include( "404.php" );
        die;
    }
});

• This topic was modified 7 years, 7 months ago by vmweb.