Hi, I would like to rebuild the app including some modification to a file in order to disable the search feature for anonymous users.(more than with just css) Can anyone provide me some documentation for the syntax of those hooks for the from: & to: part? - replace: filename: "/var/www…

There is a hidden site setting to accomplish that: rate_limit_search_anon_global_per_minute

Thanks for pointing that out. Just to clarify, what’s the name of the hidden site setting? And does it fully disable search for anonymous users, or just hide the results? I’m looking for a way to block access at the controller level, so wondering if that setting alone is enough or if some custom cod…

Thanks for providing with the variable, with this documentation I could make it work. So I modified the app.yml with the following, saved, then ./launcher restart app(no rebuild needed) env: DISCOURSE_RATE_LIMIT_SEARCH_ANON_GLOBAL_PER_MINUTE: 0 Now the /search page is unreachable = great Now t…

[صورة] opcourdis: But the question is : is this thorough? Can anyone just create a simple session cookie to make it look like they are connected so that they can access the content of the site through searches? As in log in to do searches? On the OP you specified that you want to [صورة] …

I mean non logged in user that would create a session cookie to pretend they are logged in but maybe I am fetching a bit too far here as I guess that the currentUser function checks the session key.

[صورة] opcourdis: I mean non logged in user that would create a session cookie to pretend they are logged in :face_with_raised_eyebrow: That would be a security issue. If you can achieve that make sure to report to HackerOne [صورة] opcourdis: but maybe I am fetching a bit too far here …

" That would be a security issue. If you can achieve that make sure to report to HackerOne " No, I am new to discourse, I cannot even quote properly :slight_smile: , I was just asking, maybe there was some discourse engineer around :slight_smile: ; anyway, we got our solution to this thread thanks t…

DISCOURSE_RATE_LIMIT_SEARCH_ANON_GLOBAL_PER_MINUTE: 0 mais n'hésitez pas à essayer ceci au niveau du contrôleur : /var/www/discourse/app/controllers/search_controller.rb La modification : ajouter « if current_user.present? » après « def show » et ajouter un « end » en bas de la condition.

خطافات لصيغة 'from: & to:' في yml

الدعم

Falco (Falco) 21 يونيو 2025، 9:53م 7

ستكون هذه مشكلة أمنية. إذا كان بإمكانك تحقيق ذلك، فتأكد من الإبلاغ عنها على HackerOne

الموضوع		الردود	مرات العرض
Option to enable search for logged in users only? Support search	2	399	21 يونيو 2025
Disable Searchbox for unregistered users Feature	3	1037	4 ديسمبر 2025
Hide Discourse's search and use Google's Theme component	3	1367	21 نوفمبر 2021
Help! with the Anonymous feature on discourse Development	2	1112	9 مارس 2018
Limit search avabilbility based on trust level or something similar Support	6	544	17 مايو 2019

خطافات لصيغة 'from: & to:' في yml

الموضوعات ذات الصلة