Content still available through feeds (author, category, etc)

  • Resolved JeroenK

    (@jeroenk)


    6 years, 6 months ago

    Hello All,

    While I am posting. After installing the plugin, and closing off the website to non-members after a while I found out that all the content was still available through the feeds wordpress is producing by default. Feeds like the RSS, Author, Category etc feeds.

    I would expect these to be disabled by wp-members, or at least be warned that these are still available for everyone to see.

    Is this intentionally been left out?

    I disabled these feeds by adding a few lines in htacces, redirecting people to the homepage:

    
Redirect /category/ https://www.diersporengids.nl/index.php?
Redirect /author/ https://www.diersporengids.nl/index.php?
Redirect /date/ https://www.diersporengids.nl/index.php?
Redirect ^?feed=rss https://www.diersporengids.nl/index.php?
Redirect ^?feed=rss2 https://www.diersporengids.nl/index.php?
Redirect ^?feed=rdf https://www.diersporengids.nl/index.php?
Redirect ^?feed=atom https://www.diersporengids.nl/index.php?
Redirect /feed/ https://www.diersporengids.nl/index.php?
Redirect /feed/rss/ https://www.diersporengids.nl/index.php?
Redirect /feed/rss2/ https://www.diersporengids.nl/index.php?
Redirect /feed/rdf/ https://www.diersporengids.nl/index.php?
Redirect /feed/atom/ https://www.diersporengids.nl/index.php?
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Chad Butler

    (@cbutlerjr)

    I would expect these to be disabled by wp-members, or at least be warned that these are still available for everyone to see.

    There is a specific warning that displays in the plugin’s settings when you have feeds set to “full content”. “Summary” is the recommended setting.

    This is also discussed in more detail in the plugin’s documentation, under “Recommended WordPress Settings.” There it explains the available settings, how WP and WP-Members handle it, and additional options should you want to remove them altogether.

    As a side note, the plugin’s primary approach to content is using teaser content to convert. In the upcoming 3.2.0 version, there will be a new setting for content that goes beyond it’s current handling of content. This will add “hide” as an option in addition to the existing “block” and “unblock” which will continue to operate the way they currently do.

    “Hide” content will allow the specific content to be removed completely for a non-logged in user. It will be as if the content does not exist at all. That will include removing it from pages, menus, and feeds as well.

    Thread Starter JeroenK

    (@jeroenk)

    Thanks for the explanation. Looking forward to experiment with the new features.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Content still available through feeds (author, category, etc)’ is closed to new replies.