עזרה באבטחת הפורום

[Isla (Technologically clueless)]

I need to lock down my space as a matter of urgency, so that nobody can view anything. How do I do this? Is this possible?

[merefield (Robert)]

You may have to go into more detail I suspect to describe exactly what you need.

To hide the forum from anonymous users check login required in site settings. However, note this will ruin SEO as search engines will have nothing to link to.

Beyond that start removing groups from read rights in Category Security settings which will individually hide Categories.

[Isla (Technologically clueless)]

I’ll come back to this asap, thank you!

[pfaffman (Jay Pfaffman)]

You can log out all users and put the site in read only mode.

But you can also just do a

  ./launcher stop app

[merefield (Robert)]

@pfaffman

You can log out all users

Probably worth adding how you can do that?

[Lilly (Lillian Louis)]

@pfaffman

log out all users

i believe it’s

./launcher enter app
rails r 'UserAuthToken.destroy_all'

You may want to consider posting a banner or global notice before running the command to inform your users.

[Lilly (Lillian Louis)]

also this topic may help, depending on what your concerns are

What to do if your Discourse is compromised

We’ve recently had two reports of Discourse sites that were compromised, likely due to weak admin account passwords. So we’d like to document: what to do when compromise happens what we can do to better prevent this in the future The Database Please note that Discourse, for several years now, has the following protections in place around the site database: Full database backup download links will only be sent via valid email of a site administrator, so you can’t just log in (via shoulder …

[pfaffman (Jay Pfaffman)]

@merefield

@pfaffman

You can log out all users

Probably worth adding how you can do that?

Well, yeah, if I knew how! Thanks, @Lilly!