Securing elgg

How an I secure my copy of elgg so that non-members cannot see any page other than the main page. I want a totally secure site that only members can observe any portion of it.

  • @verkraftet

    To allow access to profile pages, you can change the following:

    if (!in_array(strtolower(trim($current_url)), array_map('strtolower', $allow)))

      gatekeeper();

    to 

     

    if (!in_array(strtolower(trim($current_url)), array_map('strtolower', $allow)) && get_context() !== 'profile' && get_context() !== 'widget')

      gatekeeper();

    Note: If you do not want the widgets to show any content, you can remove the 

    && get_context() !== 'widget'

    from the end of this statement. It will allow access to the profile page showing the profile information only.