SOLVED - How can i disable "index.php?format=feed&type=rss" and "index.php?format=feed&type=atom" from my joomla website

[vijay2014]

Please help to enlighten this part. I'm not getting it.

[leolam]

This is another issue and you should open a new thread for each new issue.

Where you get this error? Change RSS-feed to RSS 2.0 (https://docs.joomla.org/Help38:Extensio ... tion_Feeds)

Leo

[vijay2014]

The issue here is with this website:- http://www.nksquare.co.in/DEV/cihner/

In the above website when the following link (http://www.nksquare.co.in/DEV/cihner/in ... d&type=rss) is passed on the the browser, featured article is displayed. .
The featured article is also displayed on the following link:- http://www.nksquare.co.in/DEV/cihner/in ... &type=atom (see the screenshot).
Our client have send this website for security audit. Please see the security audit report (attached), I'm not able to understand what it (audit report) is saying. What is the action needed on our part (recommending by security audit report)?
One important thing is that, we have not implemented RSS feature on this website, so we don't need RSS feed.
I think, when the user visits the following links:-http://www.nksquare.co.in/DEV/cihner/in ... d&type=rss , http://www.nksquare.co.in/DEV/cihner/in ... &type=atom can we direct them to 404 error page or to custom page?
Thank you.

[mandville]

Who audited your site?
Can't you just disable feed for articles,
https://www.google.co.uk/search?q=jooml ... isable+rss
Did you not notice that your site fails on basic security ?

[vijay2014]

Who audited your site?
Can't you just disable feed for articles,
https://www.google.co.uk/search?q=jooml ... isable+rss
Did you not notice that your site fails on basic security ?

Even after disabling "Show Feed link" the featured article is shown when accessing this above two links. Can I not show 404 error message when the user access this link (https://www.google.co.uk/search?q=jooml ... isable+rss)?

[leolam]

@Mandville: Cross Posting issue already posted here viewtopic.php?f=706&t=962580&p=3527320#p3527320

Leo

[vijay2014]

This is another issue and you should open a new thread for each new issue.

Where you get this error? Change RSS-feed to RSS 2.0 (https://docs.joomla.org/Help38:Extensio ... tion_Feeds)

Leo

Mr. leolam, when the user enters http://www.nksquare.co.in/DEV/cihner/in ... d&type=rss OR this link http://www.nksquare.co.in/DEV/cihner/in ... &type=atom, I want it to be displayed a "404 error " message. There is no need for RSS feed in this website. I have followed you link but it does not help. Please help me to solve this problem.

[mbabker]

There might be a plugin out there that can pull this off, but no, there is no configuration option to disable core views.

[sozzled]

I think @mbabker is right. I don't know how the Joomla CMS can prevent attempted usage of these URLs to fail (or generate a 404) unless you deliberately instruct J! to redirect those attempts to a 404 page. In other words, I don't know how to disable these things, either.

One way to do this would be to use the Redirects component. Another way would be to add a couple of lines to the .htaccess file. There might be other ways as well, but those are the first two methods that come to mind and, in my own case, when I want to prevent people using these URLS—however people may discover or try to use them—I redirect those URLs elsewhere (wherever you choose to send them).

[vijay2014]

I think @mbabker is right. I don't know how the Joomla CMS can prevent attempted usage of these URLs to fail (or generate a 404) unless you deliberately instruct J! to redirect those attempts to a 404 page. In other words, I don't know how to disable these things, either.

One way to do this would be to use the Redirects component. Another way would be to add a couple of lines to the .htaccess file. There might be other ways as well, but those are the first two methods that come to mind and, in my own case, when I want to prevent people using these URLS—however people may discover or try to use them—I redirect those URLs elsewhere (wherever you choose to send them).

Mr. sozzled, I want to redirect all the below links to the home page and I want to do that from .htaccess. Can you please show me how to do that?

1. http://localhost/cihner/index.php?format=feed&type=rss
2. http://localhost/cihner/index.php?format=feed&type=atom
3. http://localhost/cihner/index.php?format=feed&type=1
4. http://localhost/cihner/index.php?forma ... type[]=rss

[sozzled]

I want to redirect all the below links to the home page and I want to do that from .htaccess. Can you please show me how to do that?

1. http://localhost/cihner/index.php?format=feed&type=rss
2. http://localhost/cihner/index.php?format=feed&type=atom
3. http://localhost/cihner/index.php?format=feed&type=1
4. http://localhost/cihner/index.php?forma ... type[]=rss

Assuming "http://localhost/cinher" is the home page, I would do it something like this:

Code: Select all

RewriteEngine On
RewriteCond %{QUERY_STRING} format=feed
RewriteRule .* http://localhost/cihner/

[vijay2014]

I want to redirect all the below links to the home page and I want to do that from .htaccess. Can you please show me how to do that?

1. http://localhost/cihner/index.php?format=feed&type=rss
2. http://localhost/cihner/index.php?format=feed&type=atom
3. http://localhost/cihner/index.php?format=feed&type=1
4. http://localhost/cihner/index.php?forma ... type[]=rss

Assuming "http://localhost/cinher" is the home page, I would do it something like this:

Code: Select all

RewriteEngine On
RewriteCond %{QUERY_STRING} format=feed
RewriteRule .* http://localhost/cihner/

I have added those lines but it's of no effect. What could be the issue?

[sozzled]

There's no effect because ...

a) there's no real website called http://localhost/cihner/ (perhaps)?

or

b) you added these lines to the ".htaccess" file that's not associated with your website (perhaps)?

or

c) you didn't really add these lines to a file called .htaccess (perhaps)?

or

d) you just made this up to get me to guess ...

You're the expert here, not me. Sorry, but I can't guess any better. I tried my hardest to guess the right answer.

Please stop quoting everything I wrote. I know what I've written: there's no reason to quote every word I've written when you reply. Thanks.

[vijay2014]

There's no effect because ...

a) there's no real website called http://localhost/cihner/ (perhaps)?

or

b) you added these lines to the ".htaccess" file that's not associated with your website (perhaps)?

or

c) you didn't really add these lines to a file called .htaccess (perhaps)?

or

d) you just made this up to get me to guess ...

You're the expert here, not me. Sorry, but I can't guess any better. I tried my hardest to guess the right answer.

Please stop quoting everything I wrote. I know what I've written: there's no reason to quote every word I've written when you reply. Thanks.

btw:- this is how I was able to direct to the home page

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{QUERY_STRING} format=feed
RewriteRule (.*) /cihner/? [R=302,L]
</IfModule>

Thank you

[vijay2014]

Who audited your site?
Can't you just disable feed for articles,
https://www.google.co.uk/search?q=jooml ... isable+rss
Did you not notice that your site fails on basic security ?

Can you now please check this site(https://www.nksquare.co.in/DEV/cihner/) whether it fails on basic security?