How did bot get URL for my scheduled post?

  • Resolved jeuansk

    (@jeuansk)


    7 years, 5 months ago

    Hi, I really appreciate your plugin and enjoy looking through the list of all bots that were blocked trying to access our site.

    This morning I saw that, last night, a bot tried to access a non-existent page. But this particular non-existent page was actually the URL for one of our scheduled posts. (That is, it will be an existent page soon, but I thought that, until they are published, scheduled posts were completely hidden from anyone who isn’t logged in to the site.) It was not the preview URL but the clean, final url. The url contains the specific post title slug, and is not likely to have been a random guess.

    So my question is, how did the bot “know” the URL for our scheduled post? Are scheduled posts simply not as hidden as I thought, or is this a sign of some vulnerability in our site?

    Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)

  • That’s weird but I’d like to know the answer to that question too.

    Hi @jeuansk
    It could be one of your installed plugins (or even the theme) has a loop that fetch/display “all” posts on your web page regardless its status.

    Also, if the bot revealed only this scheduled post, not all of them, then perhaps you published this post by accident then rescheduled it?

    Thanks.

    Thread Starter jeuansk

    (@jeuansk)

    Okay, mystery solved. I checked with the post author, and it turns out that the post had indeed been briefly published and then re-hidden and scheduled.

    Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘How did bot get URL for my scheduled post?’ is closed to new replies.