Hello, we've discovered a problem with our site, in that when someone searches for a product using the search bar, not only do they find the products which are visible to everyone, they also see products contained within hidden categories. I have the categories set to "Hidden (direct link only)" so, according to the readme, this should protect the products from search. Otherwise, the categories do not appear in the menu.
To stop the problem temporarily, I have removed the search bar from the site, which will prevent the casual visitor from accidentally finding what they shouldn't via an on-site search. However, a power web user can still find products that they shouldn't by using a simple search string such as pastie site: australianbakery.com. If you try that search, you'll see a product named "Pack 11- 6 Cornish Pasties - EAST" Click the search engine link. That is a product that should ONLY be available to one of our business partners (Cape Foods)
Admitedly, only savy search engine users know about deep diving a whole domain. Clicking the "Cape Foods" link does not reveal everything in the whole Cape Foods category. Nevertheless, information about our business partners and pricing structures with them is revealed.
In conclusion, I need to solve two problems:
a) I need to ensure that the products within hidden categories don't come up via the on-site seach bar.
b) If possible, ensure the products within hidden categories don't come up via a search engine search.
- Version of hidecategories 2.1
- ZC ver 1.3.8A (yes, I know I need to upgrade to latest 1.5x -- after we get done with the Christmas rush.)
- Plugins / add-ons:
Throttled newsletters
UPS Shipping
Account Holders
Order Exporter
Export Shipping Information
- Zen-Cart Installed via one-click, years ago.
- PHP: 5.2.17 (Zend: 2.2.0)
- MySQL: 5.5.40-36.1-log
- We've been using hideCategories for about a year. Discovered this when some orders came in from routine customers who had found, and ordered what they shouldn't have. Then our partner showed us how he found them, without using his direct URL link, but by using on-site search.
- Customizations - changed email text to customers, email to admin, text displayed to customers when they check out.
Thank you for your help!
Greg