We use toolset to permit logged in users to message each other. These messages should be private and only the user can see messages they have sent or received.
We have been alerted to the fact that the messages are being indexed by search engines and if you click on the search engine link you can view the messages without logging in.
We need to
1-stop search engines indexing
2-protect visibility behind a login
We are unsure how to do this and need help
The guide to do that with Toolset includes directions about using Access to limit the visibility of messages to logged-in users and is done in such a way that users only see their own messages.