By Milan on Sunday, 17 January 2016
Posted in Technical Issues
Replies 7
Likes 0
Views 812
Votes 0
Dear Support,

the profiles of all the users of the Komento component are Google indexed and made public. They are listed under: [sitename and domain]/index.php/component/komento/profile/[user id]

To my understanding, they should not be listed publicly, because all of the plugins and modules of Komento are set to be accessed by register users only. Which settings should I change to disable public listing of the profiles and their comments, please?

Kind regards,
It looks like your account isn't tied up with any subscriptions on our site. Is there any mistake on our end? Would it be possible for you to contact us at https://crm.stackideas.com and provide us with the order reference and your username so that we can fix this up for you?
·
Sunday, 17 January 2016 23:12
·
0 Likes
·
0 Votes
·
0 Comments
·
Dear Mark,

I don't have any subscription with you.

If you could confirm, that this issue is not exploiting any ACL rights or bugs, I don't mind searching for the solution myself alone (it is some of the settings, so I assume). But to me it seems as a serious bug.

Kind regards
·
Sunday, 17 January 2016 23:50
·
0 Likes
·
0 Votes
·
0 Comments
·
Nope, this is not a bug and it is meant to be this way by default if you are using Komento's profile. This allows users could view another person's profile
·
Monday, 18 January 2016 00:19
·
0 Likes
·
0 Votes
·
0 Comments
·
I would understand that, if only a registered user could view another user's profile. But this is not the case: the profiles are publicly visible. Is the public domain another user?
·
Monday, 18 January 2016 00:25
·
0 Likes
·
0 Votes
·
0 Comments
·
I don't see why is this an issue at all. Even forum members profile appears to the public and this is the case for Komento.

If you don't want to use Komento's profile, you can configure it respectively
·
Monday, 18 January 2016 00:37
·
0 Likes
·
0 Votes
·
0 Comments
·
Thank you for your opinion. I don't share the same one. (I haven't seen any forum, where user profiles would be available for public in the case the forum content is for registered users only.) All of our commented Content is for registered users only. So should be their Profiles. By showing the profiles, the last comments of the user are listed as well. Again: publicly(!). This is not desired for our mostly closed site. But I understand that this is the way how Komento is implemented [sight] and the only way to solve it is to switch off Profiles or move on.
·
Monday, 18 January 2016 01:08
·
0 Likes
·
0 Votes
·
0 Comments
·
No problem
·
Monday, 18 January 2016 03:01
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post