We have encountered a MAJOR security flaw where people can easily find part of the site that we want hidden. If this isn't the right forum, please let me know where to post it.We are using the K2 component extension with the Uber template. When somebody Google searches our website + SuperUser (see Img01). They are able to find a list of all the K2 items created by that user (see Img02).We DON'T want Google (or any search engine) to index these pages for any user. Can we either disable these list pages or alternatively, just stop Google from indexing them? Do we need to use a robots.txt to achieve this? Any help would be greatly appreciated!

UPDATE: We have found part of a solution here - www.joomlart.com/forums/d/35521-remove-author-meta-tag-on-k2-items/2. We disable Show Author Meta Tag in the Global Config for the Joomla site. When Google nexts recrawls the site, will it lose these pages from the indexing or do we need to request a full manual recrawl from Google webmaster?

This is not really a security flaw, this is just the author of the items being visible. I think you can disable the user pages altogether, but you can also do a override to remove the content of the pages.

Thank you very much. We've gone into the K2 Global Config settings and turned off all the user/author info so now the pages are blank. It was a security risk for us as we had some K2 items that were being password protected by another extension. However, you were able to read the content without entering a password by looking at the Super User's list of K2 items page.

Is it possible to deactivate all userpages and especially the links generated in the header/json?

On every page i have a simmilar entry like this:

"author": {
"@type": "Person",
"name": "Administrator",
"url": "https://URL/events/autor/NUMBER-administrator"
},

"author": {
"@type": "Person",
"name": "Administrator",
"url": "https://URL/live/autor/NUMBER-administrator"
},

"author": {
"@type": "Person",
"name": "Administrator",
"url": "https://URL/broadcast/autor/NUMBER-administrator"
},


I don't want this because every article from different categories links to another author-page with the same content.

Hi. Is it possible to deactivate o rchange the generated json-code in the html-head?

We have deactivated userprofiles but they are still linked in the html-head like this

"author": {
"@type": "Person",
"name": "BCEditor",
"url": "https://URL/releases/autor/583-bceditor"
},

I don't know where to ask for this...

It's impossible to create new topic on the forum there is problem with the editor!