noindex, nofollow option #6552

Closed
ways2web opened this Issue Oct 29, 2014 · 8 comments

Comments

Projects
None yet
6 participants
@ways2web

or an possibility to add own meta tags

@tsteur

This comment has been minimized.

Show comment
Hide comment
@tsteur

tsteur Oct 29, 2014

Member

Maybe makes sense to set this by default anyway?

If not, maybe rather allow plugins to define meta tags and implement it as a plugin and publish it on the marketplace

Member

tsteur commented Oct 29, 2014

Maybe makes sense to set this by default anyway?

If not, maybe rather allow plugins to define meta tags and implement it as a plugin and publish it on the marketplace

@mattab

This comment has been minimized.

Show comment
Hide comment
@mattab

mattab Nov 3, 2014

Member

by default anonymous user has no access, so it should block search engines from finding the content
I don't think we want it in core as it's good to index the login pages of Piwik (for example they link to piwik.org)

+1 for doing it in a plugin

Member

mattab commented Nov 3, 2014

by default anonymous user has no access, so it should block search engines from finding the content
I don't think we want it in core as it's good to index the login pages of Piwik (for example they link to piwik.org)

+1 for doing it in a plugin

@mattab mattab closed this Nov 3, 2014

@mattab mattab added the answered label Nov 3, 2014

@tsteur

This comment has been minimized.

Show comment
Hide comment
@tsteur

tsteur Nov 4, 2014

Member

So why closing this issue when we could build a plugin? I still think this is actually very useful for users.

Member

tsteur commented Nov 4, 2014

So why closing this issue when we could build a plugin? I still think this is actually very useful for users.

@mattab mattab reopened this Nov 4, 2014

@mattab mattab added Task and removed answered labels Nov 4, 2014

@mattab mattab added this to the Mid term milestone Nov 4, 2014

@mattab

This comment has been minimized.

Show comment
Hide comment
@mattab

mattab Nov 4, 2014

Member

@tsteur good point thanks for pointing out!

Member

mattab commented Nov 4, 2014

@tsteur good point thanks for pointing out!

mattab added a commit that referenced this issue Nov 28, 2014

mnapoli added a commit that referenced this issue Dec 1, 2014

Reapplied "refs #6552 don't add rel=nofollow on links going through t…
…he proxy as the referrer is checked ;)" after the merge
@ryrun

This comment has been minimized.

Show comment
Hide comment
@ryrun

ryrun Jun 3, 2015

Hi, this issue should be re-evaluated. See my post here: #8036 Its about preveting for googling for piwik installations.

ryrun commented Jun 3, 2015

Hi, this issue should be re-evaluated. See my post here: #8036 Its about preveting for googling for piwik installations.

@mattab mattab added the c: New plugin label Jun 5, 2015

@mattab

This comment has been minimized.

Show comment
Hide comment
@mattab

mattab Jun 8, 2015

Member

Increasing priority.

Proposed steps:

  • show <meta name="robots" content="noindex,nofollow"> on Installation pages, Updater pages, Reporting UI pages, Admin pages, and others if any
  • show <meta name="robots" content="index,follow"> on the Login form.
Member

mattab commented Jun 8, 2015

Increasing priority.

Proposed steps:

  • show <meta name="robots" content="noindex,nofollow"> on Installation pages, Updater pages, Reporting UI pages, Admin pages, and others if any
  • show <meta name="robots" content="index,follow"> on the Login form.

@mattab mattab modified the milestones: 2.14.0, Mid term Jun 8, 2015

@tsteur tsteur self-assigned this Jun 8, 2015

tsteur added a commit that referenced this issue Jun 8, 2015

@mattab mattab closed this in #8058 Jun 8, 2015

@hpvd

This comment has been minimized.

Show comment
Hide comment
@hpvd

hpvd Oct 28, 2015

just wanted comment on mattabs comment above:
"it's good to index the login pages of Piwik (for example they link to piwik.org)"

of course from seo point of view (backlinks) I could understand that.

From security point of view an easy to find login page is not that great.
One could e.g. easily do the following thing - FULLY AUTOMATED:

  1. search for login page
  2. start brute force attack
  3. when you are successful: look for ecommerce
  4. extract /download everything
  5. make a database of ecommerce data
  6. sell it to everyone (competitors)

on other systems their is a great effort to hide login page with the following:

  • of course for every visitor: noindex, no follow, no archive
  • have a possibility to easily change login url within the backend

so I would strongly vote for noindex, no follow, no archive also for login page

hpvd commented Oct 28, 2015

just wanted comment on mattabs comment above:
"it's good to index the login pages of Piwik (for example they link to piwik.org)"

of course from seo point of view (backlinks) I could understand that.

From security point of view an easy to find login page is not that great.
One could e.g. easily do the following thing - FULLY AUTOMATED:

  1. search for login page
  2. start brute force attack
  3. when you are successful: look for ecommerce
  4. extract /download everything
  5. make a database of ecommerce data
  6. sell it to everyone (competitors)

on other systems their is a great effort to hide login page with the following:

  • of course for every visitor: noindex, no follow, no archive
  • have a possibility to easily change login url within the backend

so I would strongly vote for noindex, no follow, no archive also for login page

@AramVK

This comment has been minimized.

Show comment
Hide comment
@AramVK

AramVK May 21, 2018

I wonder why it still has index,follow on the login page. Every update I have to change it. If I don't, the page will end up high in the search result for our company name. This is obviously not something anyone wants. The meta tag is for controlling search engines; why would a search engine needs to display a login page for admins?

AramVK commented May 21, 2018

I wonder why it still has index,follow on the login page. Every update I have to change it. If I don't, the page will end up high in the search result for our company name. This is obviously not something anyone wants. The meta tag is for controlling search engines; why would a search engine needs to display a login page for admins?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment