# ============================================================
# Bluffing Monkeys - Main Site robots.txt
# https://bluffingmonkeys.com/robots.txt
# ============================================================
 
User-agent: *
Allow: /
 
# Block tracking parameters (prevents duplicate content)
Disallow: /*?fbclid=
Disallow: /*&fbclid=
Disallow: /*?gclid=
Disallow: /*&gclid=
 
# Block wpforms uploads (existing rule kept)
Disallow: /wp-content/uploads/wpforms/
 
# Block backup/temp files (security)
# Widened 2026-08-07: the $-anchored forms below only match a FINAL
# extension, so dated backups like "...-bak-20260718" were never covered
# and 26 of them were being served as text/plain.
#
# Deliberately NO bare "old" pattern. "Disallow: /*old" would match every
# Texas Hold'em URL on this site (h-OLD-em) and deindex them. That is the
# same careless-pattern mistake that caused the exposure in the first
# place, in the opposite direction. Keep every pattern anchored to a real
# extension or to an unambiguous marker like -bak- .
Disallow: /*.bak$
Disallow: /*-bak-
Disallow: /*.vbust-
Disallow: /*-backup
Disallow: /*.old$
Disallow: /*.orig$
Disallow: /*.save$
Disallow: /*.zip$
Disallow: /*.sql$
Disallow: /*.log$
 
# Block xmlrpc (security best practice - common attack target)
Disallow: /xmlrpc.php
 
# ============================================================
# Sitemap
# ============================================================
Sitemap: https://bluffingmonkeys.com/sitemap_index.xml