Option to enable search for logged in users only?

Contribute Feature
4

I’m trying that, but direct links to search pages now just return this JSON:

{
  "failed":"FAILED",
  "message":"You’ve performed this action too many times, please try again later."
}

Is there another way to do it?

The reason that I can’t let anonymous users search the forum is that a sophisticated bot is scraping data with queries like this:

/search?q=%40UserName+%23general+in%3Afirst

It looks like they are mapping users and their content for some kind of data mining task. In order to protect user data, I want to prevent any anonymous access to search. The problem is that there are internal links to search pages, so anyone who isn’t logged in will hit that incorrect JSON message.

I edited the themes so that they can’t find the search box until they log in, but any anonymous user who clicks on existing links to a search result will get the JSON.

They hit the forum with tens of thousands of requests today before I stopped it.

Edit: Claude suggested a Cloudflare security rule to redirect anonymous users who hit search URLs to the signup page. That isn’t ideal, but it will at least take care of it for tonight.

In case anyone wants to try it, here’s the Cloudflare Redirect Rule expression in Rules → Redirect Rules → create rule:

starts_with(http.request.uri.path, "/search") and not http.cookie contains "_t="

Type: Dynamic off / Static URL redirect → https://forum.your_domain.com/signup, status 302, don’t preserve query string.

1 Like