Preventing “sneak peeks” using ?p=x with a preloaded blog

  • Resolved mattshepherd

    (@mattshepherd)


    15 years, 8 months ago

    Hi all,

    I’m converting a graphic novel I wrote years ago into a daily updating comic, and trying to get the whole thing online (160 pages!) ahead of time so I don’t have to worry about updating it every day.

    The problem is that I’ve discovered that pages can be generated as

    https://example.com/?p=70

    and so on.

    I’ve changed the slug settings so that individual pages are just (upcoming) blog title names, so that a typical archived page might have a URL like

    https://example.com/hey-its-the-first-page-of-my-comic

    but that doesn’t prevent me from typing in

    https://example.com/?p=1

    and getting to the first comic anyway.

    I’m worried about people just typing in incremental p= values and “reading ahead” faster than I’d like them to. Is there any way to change this/turn it off/prevent it?

Viewing 4 replies - 1 through 4 (of 4 total)

  • Can’t you leave the pages/posts as draft or pending and set a later publish date?

    Non-published posts/pages shouldn’t be viewable..

    Thread Starter mattshepherd

    (@mattshepherd)

    I’m over 100 posts in on the scheduling, so I’d rather not backtrack now.

    Are the pages only viewable because I’m logged in as an admin? If I try the ?p= trick on my work computer and a browser I hardly ever use, I get a Page Not Found error (but the full address in the address bar).

    That’s the whole point of the publish date though isn’t it? :-s … to schedule when a post goes live…

    I’ve not had to deal with such a situation myself.

    Not sure regarding the error, i’d need to see your page to see to test if i can view the page(s).. and see what occurs when trying to view…

    You can always logout and test yourself, create some basic user accounts if you have to… test the scenarios you’re trying to deal with ie. users.. and visitors..

    FWIW, I use the https://example.com/?p=70 url format all the time to allow a team of authors to preview draft posts. If your posts are published, I’m pretty sure I could get to them even though they’re not on any menus or archive listings. Don’t think there’s any way around it – other than maybe some very fancy mod_rewrites.

    As t31os_ said, post scheduling is definitely the way to go. The Admin Post Control plugin might ease the pain of having to go back through those 100 posts of yours.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Preventing “sneak peeks” using ?p=x with a preloaded blog’ is closed to new replies.