i'm observing following behavior and wanted to know if this is "Functions As Designed".
If you know the URL of a picture in original size (http://Server/Gallery/img.jpg)
then it does't matter what accessrights you set for the gallery or the picture (e.g. group member / family / etc.)
You gain direct access to the picture.
OS: Gentoo Linux
PHP: 5.3.15-pl0-gentoo [2012-08-06 20:13:32]
mysql: 5.1.56-log [2012-08-06 20:13:32]
Grafikbibliothek: ImageMagick 6.7.5-3
While I am not a developer, if someone knows the URL of the actual file (i.e. xxxx.JPG), then no piwigo code runs to access the file and it's served to you via the web server. If they can get to it via http://domain/pwigo_dir/picture/xxxx, then that's a different matter. If you're really worried about that, I would set
$conf['category_url_style'] = 'id';
in your local config so that no one knows the file name.
Last edited by geoffschultz (2012-08-07 00:18:19)