When anyone from the Internet visits https://mydomain.co/u/profilename then can view the user's profile and all their posts without having to log in. I thought that was not allowed. Is this expected behavior? If not, how do I fix this?
this one might be of interest too: https://www.opensource-socialnetwork.org/component/view/316/profileaccess
there's a free component to disallow access to those pages unless someone is logged in: https://www.softlab24.com/product/view/87/private-network
Due to the many requests in the past for additonal features and components we have decided to develope a premium version. Features like Hashtags, Videos, Polls, Events, Stories, Link Preview, etc included in it.
$199 (Life Time)