We have spiders/bots blasting one of our sites using old links. We found that our onInvalidEvent handler was not firing. It took a while, but it turns out that the old url structure had the key “view” in it. e.g.:
http://www.mysite.com/index.cfm/prod/abc/**view**/1/id/417
This generates a non existent event: prod.abc and so the invalidEvent should fire, but instead we get a missinginclude exception as Coldbox looks for the non-existent file 1.cfm
`
Page /views/1.cfm [C:\apps\mysite\app\views\1.cfm] not found
`
We have implicitViews turned off, so this was perplexing. It turns out the key “view” is the culprit. Change it to anything else, onInvalidEvent runs and we can trap this properly.
So is this a bug or is this a feature (like the url dumpVar) that I can toggle off?
As there is no way to prevent these bots from hitting these older URLs, is there a way to prevent Coldbox from doing this so that we can properly return http status codes, etc.?