Directry not protected

  • We have the directory page set as /members and in that page we have set the content to only be available to loged in users with member and admin selected. However, this page and content are still visible to anyone that visits the site. How can we make the Member Director private so only logged in users can view it, please?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter espermedia

    (@espermedia)

    Looks like it was a site caching issue – WP Rocket needs the Members page to not be cached or the redirect only works once – then the page is available to anyone…weird.

    @espermedia
    If you don’t mind my asking, how did you folks handle the correction? Did preventing caching fix it permanently(or for the past three weeks) ?
    This is a really strange issue. We’re dealing with it in one of our sites, now. It has some huge security flaws. At the moment, if you visit our clients site and refresh the directory page, then suddenly all pages are available without logging in. I hope Ultimate Member addresses this. Its a pretty big security flaw for sites.
    Thanks in advance, mate!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Directry not protected’ is closed to new replies.