Piwigo.org

bmcgough · 2009-07-06 23:15:19

2.0.1

I would like to use piwigo to host pictures for friends and family.

I want only logged in users to see thecategories with everyone else redirected to a 'splash' page with a login and register link only (and perhaps some basic information).

How can I do this with piwigo? Are there existing extensions that will let me?

VDigital · 2009-07-06 23:23:25

Install and activate LocalFiles Editor plugin (You will reuse it for many thing later). It avoids a lot of common errors.

In the first tab, just code:

$conf['guest_access'] = false;

plg · 2009-07-06 23:34:18

VDigital wrote:
$conf['guest_access'] = false;

I had forgotten this one, thank you VDigital. I see in the code that it only redirects disconnected visitors when they browse index.php, shouldn't we move the check to include/common.inc.php (with a check that we are not on identification.php). This way we would also avoid direct browsing to picture.php

bmcgough · 2009-07-06 23:40:22

Thank you - that's just what I was looking to do!

If deep linking is still possible, that is something I'd like to disallow as well, but for now, this is a good start.

It seems like two approaches would work for solid locking down of a site to registered users only. The first would be an authentication plugin/module for the web server (not attractive as you would need one per server code base), or a rewrite rule through a quick 'logged in' checker page in the piwigo code base.

I'll test deep linking next.

Thanks again,

-Ben

VDigital · 2009-07-06 23:48:47

plg wrote:
VDigital wrote:
$conf['guest_access'] = false;
I had forgotten this one, thank you VDigital. I see in the code that it only redirects disconnected visitors when they browse index.php, shouldn't we move the check to include/common.inc.php (with a check that we are not on identification.php). This way we would also avoid direct browsing to picture.php

Absolutely true. I will open a feature(/bug) for it.

[Bugtracker] ticket 1044

damufo · 2013-02-28 17:32:36

Hi:

This is not enough.
On piwigo 2.4.7.
A disconnected user (and $conf['guest_access'] = false;), this url:

http://localhost/piwigo/i.php?/../image/test.JPG

show the image from album protected!
This is a bug?

Thanks.

mistic100 · 2013-02-28 17:34:34

related topics :
[Forum, topic 20372] Secure Images
[Forum, topic 21104] Private photos are publicly accessible?

flop25 · 2013-02-28 20:32:46

and in Piwigo 2.5 the original images will be protected with a simple config var
Also have a whole protection (like Gallery3) is not without performance and compatibility issues

Piwigo.org

Announcement

#1 2009-07-06 23:15:19

Private Piwigo?

#2 2009-07-06 23:23:25

Re: Private Piwigo?

#3 2009-07-06 23:34:18

Re: Private Piwigo?

VDigital wrote:

#4 2009-07-06 23:40:22

Re: Private Piwigo?

#5 2009-07-06 23:48:47

Re: Private Piwigo?

plg wrote:

VDigital wrote:

#6 2013-02-28 17:32:36

Re: Private Piwigo?

#7 2013-02-28 17:34:34

Re: Private Piwigo?

#8 2013-02-28 20:32:46

Re: Private Piwigo?

Board footer