Hi community!,

Currently the original image can be protected by enabling

$conf['original_url_protection'] = 'images';

Derivative/resized images can still be accessed directly, even with original_url_protection enabled.
You don't have to be logged in to access derivative images.

I already created some (although not perfect) code to allow action.php to parse derivative images, see:
http://piwigo.org/forum/viewtopic.php?pid=152403

Coming from Gallery2, I really like to share photo albums with friends in a secure way.
I find it unacceptable to tell friends that my and their photo's can be accessed by anyone with a direct URL.
Having all images and non-images run thru action.php makes sure that someone needs to be logged in, before access is granted. To finish it I add "Deny from all" to .htaccess in /_data/i/galleries/ and /galleries/ and we have closed a security issue in Piwigo!

This feature will be much appreciated by certainly current/old Gallery2 users.

So, who is willing to pick this up? Or if you want to make it a joint effort: please help me out. I have little knowledge about Piwigo code, apart from fiddling with it the last days.

I appreciate your response!

Piwigo version: 2.6.3

Best regards,
Ben