We have build a public website in salesforce and the urls look something like:
https://ourdomain.force.com/ourdomain/CommunitiesMyProfilesSidebar2?block=ContactInfo
This works perfectly and shows contact information.
https://ourdomain.force.com/ourdomain/ goes also to contact information.
So far everything is OK.
Now if I type https://ourdomain.force.com/ourdomain/anything_here_that_is_not_valid
I go to a standard(ish) salesforce page with a 'Recent Items' box on the left and a Global search bar at the top, etc…
Even worse. If I 'guess' a valid id I can even edit and clone the record in a standard page layout. That is not a big problem because you can only edit/clone your own records but it looks ugly.
Is there any way to prevent this?
I already looked at the man pages for the communities profile and basically looked over everything in the setup. Also google is no help here…
Best Answer
Its a very OLD thread but I faced same issue and after a lot of research I found that there is Salesforce inbuilt configuration for it (Unfortunately no documents for it)
You Can Remove access from All Salesforce Standard Pages for a community/site where we want to host only our VF pages.