How to make sure nobody finds the page

Hi,

I want to avoid username & password protection of a page, so I want to avoid people from finding the page. I make sure name is hard to guess such as 7reiibrfiew932z49.php, so only people that I give URL will be able to find the page.

I know about meta tag

<meta name="ROBOTS" content="NOINDEX,NOFOLLOW" />

HTML:

However,
can I be sure nobody will find the page, if it's hidden from search engines?

Maybe there is some hacking-application that will browse through my server and see that page?

Can I make some other precaution that my page remains hidden unless somebody knows exact URL?

 

Following points shall ensure anonymity of the pages you want to be hidden from world.

1. Change directory / file name you want to hide.
2. Do not link it from any page from your website.
3. Add password protection using htaccess.

Adding it to robot.txt will reveal the location so do not add it anywhere to even give indication to search engines. It should be treated as the file does not exist and hence can not have any link, any robot.txt entry or any mention on website.

There could be more ways too, but above shall make it secure at good level.

 

hi,
write an query that stores time, IP in your database .so that you may know who visits your page and at what time.

 

^^ How will that ensure page is not found by anyone?

 

i'd probably have to do it in google webmaster tool instead than this. nobody can see a page when you set in in googles webmaster rool

 

What about other search engines? How about custom web crawler to check vulnerability?

 

If you don't link it from anywhere and don't mention it anywhere, use a difficult name inside a number of subfolders and turn listing folder content off then there shouldn't be a way for search engines/crawlers to find them. However certain toolbars send data to their makers and sometimes the contain what url's you are visiting.

I would strongly suggest to simply password protect the page. Why don't you want to password protect the page if it is so important?

 

If the file is in a separate directory, you can use .htaccess deny rule.

deny from all

Code (markup):

This will make sure no one gets through ( direct access disabled ) except you - access granted only when the file is being included.

 

for simplicity sake

 

It is much more simple to just add a username and password via htaccess, it takes about 2 mins to set up and you wont have to worry about anyone seeing the page. Security through obscurity is the weakest form of security and the method you describe, even without linking to it anywhere, will still have the chance of someone else you don't want to see the page to see it.

 

Careful though. Ive heard of javascript history stealers and such. Delete your history and watch your cookies.

 

That will have no effect if the directory was simply protected by a .htaccess file.

 

Generally if i make a file that should only be seen by me and someone else I just use
if(! $_SERVER['REMOTE_ADDR'] == my ip|friends ip ) die('hello');

 

Yes, but same effect can be made if someone who knows the username/password can distribute it to others?