At any one time I have a number of blog articles that are in draft. Generally, if I encounter something useful, I’ll note it in a draft blog entry, to revisit, research and write up at a later date.
So, while these aren’t accessible from any hyperlink, I find I am still able to reference them by going to the link directly. E.g: http://www.jameswiseman.com/blog/?p=xxxx (where ‘xxxx’ is the post number).
Recently, on my site logs, I have seen an IP (from Ljubljana, Slovenia) that has been accessing these draft posts, which although not particularly sensitive, is still kind-of annoying. I’m guessing they are using the method above.
Is there any way of stopping this?
EDIT:
Given the response below, I am indeed unable to access the post when logged out, however I am still seeing from my access logs hits on my draft pages.
Any more thoughts?
Yes, you (read: the logged in user) will be able to see the drafted post. But, a guest will not be able to read it.
To test it, login to one browser and create a draft. See its URL in another browser where you don’t login (no cookie, etc).