Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 291300

Access to old file in revision

$
0
0

Hello to everybody.
I love Drupal :)
I use Drupal 7.22 with public file system. I set 700 permission on files directory and its subdirectory.
I've a question about node revision with file field.
You can reproduce problem following these steps:
1) create content type with file field
2) add node and upload one file (copy link to the file http://...........txt)
3) change node deleting file and add another one checking "create new revision"
4) now you can access to the first uploaded file by the copied link

So you can access to the old files, and search engines can index these. Now I use "robots" to block crawlers, but any user can access to the old files (sometimes only removing _0 _1 _2 on the file name)

Early I think that the problemHello to everybody.
I love Drupal :)
I use Drupal 7.22 with public file system. I set 700 permission on files directory and its subdirectory.
I've a question about node revision with file field.
You can reproduce problem following these steps:
1) create content type with file field
2) add node and upload one file (copy link to the file http://...........txt)
3) change node deleting file and add another one checking "create new revision"
4) now you can access to the first uploaded file by the copied link

So you can access to the old files, and search engines can index these. Now I use "robots.txt" to block crawlers, but any user can access to the old files (sometimes only removing _0 _1 _2 on the file name)

There's a way to prevent this?

Thank you so much


Viewing all articles
Browse latest Browse all 291300

Trending Articles