Major Bug: Guestlist can be found PUBLIC

Hey there,

I found a major problem with my EBS: The Guest-List -Popup can be opened and be found in google when using the right keywords.
This is not acceptable and brings a lot of trouble to me right now.

Plus, the last necessary updated reset my registratntlist-options completely.
I only want to see my custom fields, not any of th standard names.

Help! :ohmy:

-Fallen

Maybe create a ticket and send the Dev team more information (eg. the Google search keywords) so that they can work with you on figuring out a solution.

A few work-around thoughts while Tuan and team look into this:
1) Is the "pop-up" be opened as stand-alone page via the Google search result? If so, you can add the page to a robots.txt search-engine directive file on your site to request that search engines do not index said pages. Search Google for more info on robots.txt files or see what the Joomla Docs - Robots.txt link has to say
2) If you don't need to show the guestlist, you could also override the guest list tmpl/view file so that your site does not generate guest list results.
3) In YOURSITE/administrator/index.php?option=com_config&view=component&component=com_eventbooking , you may want to change the ACL permissions for [View Registrants List ] to not allow EDIT: public [strike]Guest[/strike] viewing.

1) Yes, it does, if you enter a specific domain search. The file is already excluded by standard in robots.txt for all engines.

2) That would be the hardline-solution. Will think that through. I just deleted all unwanted fields and just show nicknames right now, so the primary problem is gone for now.

3) Whyever it was set to "show" for guests. I Reset this option now.

Thank you for your quick help.

I'd love to hide the page from hotlinking if that is possible in some way, that would be the perfect solution.
I also really wonder why the crawlers seem to ignore the robots.txt

-Fallen

It is actually not a bug. It is configurable in permissions configuration of Events Booking. See eventbookingdoc.joomservices.com/fronten...lay-registrants-list for more information

In case you don't want registrants list to be available for public, set View Registrant List permission for public group to Inherited, set that same permission for Registered user group to allowed (if you want logged in users to be able to see the list)

Tuan

Thanks for clarifying, Tuan. The docs link you posted outlines this well (along with other features for the list that I had forgotten about!).

Thank you!

I changes that yesterday night.
The problem is that I can still access it by a direct link without being logged in.

Did I forget something?

-Chris

//EDIT
For some reason - it seems to work now. It shows a reaction to if i'm logged in or not. I can still access the page, but it will be empty when i'm logged out.
So the remaining question is, can I somehow prevent hotlinking the page? That would be the final step.

So how you want to be able to view that page? Or you don't want anyone to see list of registrants from frontend of your site? Let me know so that I can guide you to change permissions setting

Regards,

Tuan