I am a Sr. Software Developer at Oracle Cloud. The opinions expressed here are my own and not necessarily those of my employer.
You work hard and build your awesome Rails app. You launch your MVP and slowly users start coming to your site. But then you start noticing exceptions in your logs for URLs like “wp-login.php” and “login.aspx”.
Welcome to the Internet where bots scrape your site looking for vulnerabilities. You can’t control what others do but it would be nice NOT to have all these exceptions in your logs. There are several solutions to the problem.
One options is to create a catch-all route as is explained in this StackOverflow article. Or you could redirect to root like this. The downside is that you might have an error in your routes and these approaches can mask it.
What I prefer is to define a list of specific routes that I do NOT want to cause exceptions for and respond with blank page or redirect. You can do it all in your routes.rb (it’s a ruby file after all) without creating special controller.
Here is an article discussing how to do it. But as you add more URLs your routes.rb will become messy so you want to move the them to a different file. You could put them in application.rb:
But this can clutter your application.rb. Why not create an initializer?
You can create additional rules for redirecting to different destinations or responding with other HTTP codes. Keep in mind that your routes are evaluated in the order being listed in your routes.rb. And having a huge routes.rb file could slow down your app.