Announcement

#1 2020-04-09 17:32:38

Ralf
Member
Dorsten-Lembeck
2012-05-08
169

IP Adresses

Hi,

just a dumb question or two.

As far as I can see Piwigo still stores the visitors full IP Adress in the history table and if a comment is submitted the full IP Adress is stored in the comments table too.

Is it planned to implement a backend function to anonymize the IP Addresses?

Thanks
Ralf


There are only two kinds of music:
Rock and Roll

https://www.ralf-kerkhoff.de

Offline

 

#2 2020-04-10 16:52:09

plg
Piwigo Team
Nantes, France, Europe
2002-04-05
13300

Re: IP Adresses

Hi Ralf,

Yes, Piwigo still stores the full IP address in the history table (and comments table too).

Is that really a problem? in regard to GDPR, maybe because now they consider IP address as "personnal data". I strongly disagree, but I don't write the rules...

As long as web servers (Apache/Nginx) are writing, by default, the IP address in the log files, I wonder why we care about Piwigo storing it in the database. Furthermore, the Piwigo history table is automatically purged at 1 million lines by default. You can change this parameter. You can even disable history.

I have serious doubt we can consider "removing IP address" as a priority. Maybe I'm missing an important point here, and I would be happy to reconsider!

It's a bit like the "cookie consent" popin you see on many websites. Actually it's useless on Piwigo (unless you had a javascript code snippet from Google Analytics, for instance)

Offline

 

#3 2020-04-10 19:32:26

erAck
Piwigo Team
2015-09-06
475

Re: IP Adresses

You can use [extension by Eric] Prune History to set the retention time of the history to, for example, 7 or 14 days.

I believe that extension could also be a good place to implement a "remove last octet from (v4) IP" functionality if someone wants to retain history for a longer time.


Running Piwigo at https://erack.net/gallery/

Offline

 

#4 2020-04-11 18:30:35

Ralf
Member
Dorsten-Lembeck
2012-05-08
169

Re: IP Adresses

Hi,

I already use Prune History. But the history table is only one point.
If comments are enabled the full IP Adress is saved too.

At the moment I have added a few lines of code to:
functions.inc.php and comments.inc.php
which replaces the last digits with a 0.

That works fine but after a Piwigo update there might be some handwork to re-add the code, if the two files are updated.

I already tried to write a plugin for that, but to be honest I have no idea what exactly is required as a plugin code.
The code I use can be found here:
https://piwigo.org/forum/viewtopic.php?id=28685

It would be great if someone give me some hints how to implement this in a plugin.
I guess at least some german users might be interested in such a plugin

Cheers
Ralf


There are only two kinds of music:
Rock and Roll

https://www.ralf-kerkhoff.de

Offline

 

Board footer

Powered by FluxBB

github twitter newsletter Donate Piwigo.org © 2002-2020 · Contact