nigelt74:
The bmz_cache will show up because that is where the images are stored and those links are on your webpages, which the bots crawl, so unless you were to put a disallow bmz_cache directive in your robots.txt file you can't really prevent that appearing in google
Nods in agreement..:yes:
nigelt74:
Thats more of a server configuration issue, infact it is a bit worrying, most servers are set to disallow the view of directories like that, for most that i have experience if you tried to access the bmz_cache folder eg example.com/bmz_cache/ you'll get a 403 error.
Although perhaps "to idiot proof it" in future it might be an idea to add in an automatic generation of an index.html in each bmz folder
Not all servers.. Bluehost for example does not.. But a directive in your root level .htaccess will do the trick nicely..
For those concerned about this, we've covered this in the Rev8c release through an optional directive in the.htaccess file that is in the bmz_cache folder.
In addition to disallowing the upload of potentially destructive files, the .htaccess includes an optional directive that prevents the viewing of the bmz_cache directory listings without interfering with the images being viewed. (so they will still be indexed by Google unless you include the appropriate directives in your robots.txt file.
IndexIgnore */*
## NOTE: If you want even greater security to prevent hackers from running scripts in this folder, uncomment the following line (if your hosting company will allow you to use OPTIONS):
#OPTIONS -Indexes -ExecCGI
``` Uncommenting this optional line will prevent anyone from viewing the image directory listings without blocking image from being seen.
See this in action on my test site.. <http://zentestcart.overthehillweb.com/index.php?main_page=product_info&products_id=1>
FYI, though this seems like an issue it is NOT a TRUE security issue at all.. What IS (and has been corrected in Rev 8c) a real concern with regards to IH2 is that the bmz-Cache folders in older version are not fully protected from the upload of potentially malicious scripts.. The Rev 8c .htaccess file addresses this concern. (We are using the same .htaccess that has been added to many folders in the 1.3.9 Zen Cart releases)
