Uploaded CVs publicy available on internet

Permalink Browser Info Environment
We have a problem where CVs uploaded by job applicants are being indexed by Google and are publicly available to anyone on the Internet using the download_file link, e.g. "http://..../index.php/download_file/view/12345/123". How can these files be hidden/removed/moved so that they aren't visible and aren't indexed by Google.

thanks,

Paul

Type: Discussion
Status: New
psunners
View Replies:
Tony replied on at Permalink Reply
Tony
as a short term fix to stop the search engines from indexing those files, you can add this to your root directory's robot.txt file:

Disallow: /files/*

within the files section of your dashboard you can also tighten up the permissions on those files to make it required to have a password to download them. I can do a little digging around to see if we can automate that during the upload process, but that might be a bit tricky consider that currently uses a standard concrete5 form block for the resume submission page. Customizing that might loose backwards compatibility if I have to include a custom version of that block with the package.
boscha replied on at Permalink Reply
boscha
I would also be intrested in such a solution ...
so, if you have and code snippet to implement I would be very grateful!
psunners replied on at Permalink Reply
psunners
Sorry for taking so long to get back. I'll update the robots.txt file and hopefully that will work.

I noticed that the uploaded files are not being added to any File Sets. There is a file set called "Jobs Board File Attachments" but the only files in there are some sample text files (sample_attachment.txt). None of the uploaded files have been allocated to it. I think if they were allocated to a set it would simplify things, I could then setup access rights to the set. Is this as bug or something wrong in my configuration?
Tony replied on at Permalink Reply 1 Attachment
Tony
can you please try going to the job application page, putting that page in edit mode, and editing the form block there, then selecting that file set next to "Add uploaded files to a set". That should do the trick for you.

concrete5 Environment Information

Browser User-Agent String

Hide Post Content

This will replace the post content with the message: "Content has been removed by an Administrator"

Hide Content

Request Refund

You have not specified a license for this support ticket. You must have a valid license assigned to a support ticket to request a refund.