Hi Andi, It is now possible for unauthenticated people to access all the contents of the _media path, including google. This is disastrous for us as we have been using the wiki for internal discussions and planning. We have namespaces set up to be public, and others set up to be private. All content uploaded to the wiki, whatever the namespace, is publicly visible. Maybe I need to phrase the question another way: is it possible to block direct access to the _media path, or to verify that you can only access certain media if you are authenticated for that namespace? Cheers, Tobias On Fri, Mar 21, 2008 at 7:42 AM, Andreas Gohr <andi@xxxxxxxxxxxxxx> wrote: > On Fri, 21 Mar 2008 06:57:04 -0700 > "Tobias Eigen" <tobiaseigen@xxxxxxxxx> wrote: > > > Hi all, > > > > I have made an unpleasant discovery: the contents of _media on my > > dokuwiki are appearing in google searches. I have now moved the > > install to another domain in the root dir with the dokuwiki default > > .htaccess file and a robots.txt file containing: User-agent: * > > Disallow: /_media > > > > I'm in a big hurry to close this hole, and in the quick searches I did > > today and yesterday I didn't find any FAQs on this subject right away > > - sorry if I missed them. Can someone please direct me to any existing > > instructions/FAQs or give me guidance? > > I don't see what the problem is? What help do you want? > > Andi > > > -- > http://www.splitbrain.org > -- Tobias Eigen Senior Steward - IT Global Action Networks-Net (GAN-Net) http://www.gan-net.net Executive Director Kabissa - Space for Change in Africa http://www.kabissa.org -- DokuWiki mailing list - more info at http://wiki.splitbrain.org/wiki:mailinglist