I checked the server log and, as an unregistered user, tried many of the URLs called by the Google bots. I saw only the login page. You were right and I am relieved.
One issue remains, the origin of the concern. I can reproduce it with one browser, but it is easier to test with two:
- I log in as an admin in browser A and browser B.
- In browser A I go to the restricted admin area and spend some time there, reading threads.
- In browser B I go to "View who is online" and can observe the way of the admin in browser A. The correct thread title is shown. BUT: the user name is "Guest" and the IP address belongs to a Google bot.
huh?
Is this a bug or do I have a little google glued to my shoes?