Based on concerns and dealing with issues raised here over time (which from reading is systemic across the web the last few months) and facing new waves of this stuff. I tested Login Only, but noticed these AI bot waves hitting all kinds of discourse resources/paths, and potentially getting served …

[صورة] agemo: hitting all kinds of discourse resources/paths, and potentially getting served a page/contents Which paths specifically? anything that gets hit should redirect to login. [صورة] agemo: Can anyone confirm if Login Only is a total block or not? Yes, login only means the onl…

As posted in the linked topic, for e.g.: ...stylesheets/docker_manager_abc123.css In some simple testing I followed the links various traffic was seeking, and I was able to pull down the css or js files and who knows what else, when discourse was in Login Only mode.

Oh I see, yes that’s expected… those are static assets used to render the app, they are often cached for performance and don’t contain sensitive post information.

Ok I understand the but maybe true lockdown needs to be deeply and quickly considered, for technical reasons I can’t think of other than leaving no threads that can be yanked DDoS level. I’ve just seen nearly 3K unique URL request targeting specifically uploads/default/original/3X/c/.../...some.jpe…

Maybe https://meta.discourse.org/t/secure-uploads/meta/140017 could help you on this?

Thanks for pointing that out. I was not aware of it, but yea a BIG maybe, I don’t know if I have the time and resources to implement right now.

Searching meta I have discovered the below option here and have activated: Prevent anonymous users from downloading attachments. Maybe this will block such requests or help to some degree.

تسجيل الدخول فقط - هل يوقف فعلاً كل حركة المرور بدون تسجيل دخول؟

الدعم

awesomerobot (Kris) 15 ديسمبر 2025، 11:19م 6

ربما يمكن أن يساعدك هذا الرابط Secure Uploads في هذا الأمر؟

الموضوع		الردود	مرات العرض
login_required even redirects robots.txt to /login Bug	2	1023	15 أكتوبر 2015
Seeing anonymous user and crawler traffic, even though site is private Data & reporting	3	945	9 سبتمبر 2021
Anonymous views suddenly very high Data & reporting	48	1622	10 ديسمبر 2025
Login and Logout Errors from Cache Settings Conflict with Cloudflare Support cloudflare	31	468	7 يناير 2025
Login Modal not shown when login page is accessed directly in a private forum Feature	15	2065	9 مايو 2019

تسجيل الدخول فقط - هل يوقف فعلاً كل حركة المرور بدون تسجيل دخول؟

الموضوعات ذات الصلة