Security - Member's photo albums show in Google

A member of mine complained that his photo album is available to view from google search results without being logged in as a member. This is the link address (with replacements) that is available to view.

http://mysite.com/m/photos/browse/album/nickname-s-timeline-photos/owner/nickname

How can I stop this?

Quote · 10 Jun 2014

Based on my tests, the only time a guest can view those URL's is if the album is set to public.

In other words. The members has to edit the albums privacy setting and change it to something other than public.

Example. My album on my site with it's privacy set to members. http://www.deanbassett.com/m/photos/browse/album/Deano-s-timeline-photos/owner/Deano

https://www.deanbassett.com
Quote · 10 Jun 2014

I only have 3 settings: default values, public and member.

I want the default to be 'member'

Should I enable 'Default Values'  or  'Default' Group? and How do I set the default to 'member'?

Quote · 10 Jun 2014

I have explained to my members that we are allowing them to have both public (the world, anyone on the internet) content as well as private and just for members (site members only).  You might want to create a FAQ for them on this.

Now here is the problem with members profile photos; I consider it a Dolphin bug and have tried to illustrate the problem to AlexT but I don't think he understands.  The bug can be recreated on Boonex.com.

Let's say you decide that you don't want public content, your site will be a members only site; therefore you go into the admin and remove the Public privacy group.  Now, Dolphin will set the privacy level for new Profile Photos albums to public no matter what because it is hard coded to set it to public.  What happens is that none of your members will be able to see other member's profile photos because the privacy level is set to public and there is no public privacy group on your site.  I tried to explain to AlexT that it should either be a setting in admin, or it should check to see which privacy groups are active and set accordingly.

For now, your solution; unless you want to make changes in the core files as I did for a private site, is to inform your members that if they don't want their profile photos to be public (viewable by the world) is to change the privacy level to members.

Geeks, making the world a better place
Quote · 10 Jun 2014

 

I want the default to be 'member'

Not possible, Dolphin is hard coded to set it to public.  I wish someone would put a ticket in on this.  The best solution would be a setting in admin for the default privacy level for Profile Photos albums.

 

Edit: similarly for other profile albums.

Geeks, making the world a better place
Quote · 10 Jun 2014
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.