Piwigo.org

WayneWestPhotography · 2013-04-25 19:06:27

I love Piwigo and recommend it to my photographer friends, but there are some improvements that I'd like to see.

First, when it comes to an admin or user logging in to the site, rather than signing in from the HTTP page, redirect them to a login page that's HTTPS. I don't like logging in as admin through an unsecured connection.

Second, when someone posts a comment, the email that I receive as admin shows the entire IP address, yet you cut the last octet in the comments table. Since you cannot easily directly connect an individual directly to an IP address, this anonymization is pointless. Give me the full IP address in the database.

Related to this second question, how do you log IPv6 addresses or is this not accommodated yet?

Also related to the second question, have you considered a centralized 'block' database or just the ability to block addresses directly? I received three comments just now on three different photos, all from the same IP address, three different browsers, all pointing to the same blog (which has only one post created today) shilling raspberry ketones. I've noticed certain IP addresses producing the most link spam comments, it would be nice to be able to block them.

Finally, in the lower right corner you have a link for contacting the webmaster and it does a direct mailto: the admin email address. This also should be through a web form so that it cannot be directly harvested by spambots. I didn't notice this until today, and now I'm going to change that email address as I don't want that particular one getting spammed more than it already is.

And my apologies if these have already been discussed at length, I didn't have time to dig too deeply in to past enhancement requests.

Again, love the product, keep up the good work!

Wayne West
WayneWestPhotography.com

Last edited by WayneWestPhotography (2013-04-25 19:23:16)

rvelices · 2013-04-25 20:24:22

WayneWestPhotography wrote:
Second, when someone posts a comment, the email that I receive as admin shows the entire IP address, yet you cut the last octet in the comments table. Since you cannot easily directly connect an individual directly to an IP address, this anonymization is pointless. Give me the full IP address in the database.

As far as I know ips are not recorded in the comments db table. Are you sure you are not looking at the rating table ?

rvelices · 2013-04-25 20:28:14

WayneWestPhotography wrote:
Also related to the second question, have you considered a centralized 'block' database or just the ability to block addresses directly? I received three comments just now on three different photos, all from the same IP address, three different browsers, all pointing to the same blog (which has only one post created today) shilling raspberry ketones. I've noticed certain IP addresses producing the most link spam comments, it would be nice to be able to block them.

there are several plugins related to comment spam...

mistic100 · 2013-04-25 20:51:04

rvelices wrote:
WayneWestPhotography wrote:
Second, when someone posts a comment, the email that I receive as admin shows the entire IP address, yet you cut the last octet in the comments table. Since you cannot easily directly connect an individual directly to an IP address, this anonymization is pointless. Give me the full IP address in the database.
As far as I know ips are not recorded in the comments db table. Are you sure you are not looking at the rating table ?

they are, I changed it because the antispam system considered any IP as the same user (unusable for galleries with many guest commenters)
and I get the code from rating system

WayneWestPhotography · 2013-04-25 20:52:31

rvelices wrote:
WayneWestPhotography wrote:
Second, when someone posts a comment, the email that I receive as admin shows the entire IP address, yet you cut the last octet in the comments table. Since you cannot easily directly connect an individual directly to an IP address, this anonymization is pointless. Give me the full IP address in the database.
As far as I know ips are not recorded in the comments db table. Are you sure you are not looking at the rating table ?

The piw_comments table has the field anonymous_id which records the first three octets of the comment poster's IP address. I installed my system in March, so it was a fairly recent build.

And thanks for the suggestion of plug-ins, I haven't had a chance to really dig in to them yet.

petitssuisses · 2013-05-03 12:26:15

WayneWestPhotography wrote:
First, when it comes to an admin or user logging in to the site, rather than signing in from the HTTP page, redirect them to a login page that's HTTPS. I don't like logging in as admin through an unsecured connection.

Hi,
I had the same feeling as yours concerning https. I developed a plugin fill the gap, it's now available in extensions (http://piwigo.org/ext/extension_view.php?eid=697)
Feel free to comment or discuss for enhancements.

Piwigo.org

Announcement

#1 2013-04-25 19:06:27

Enhancement request: HTTPS, full IP address logged, and web form email

#2 2013-04-25 20:24:22

Re: Enhancement request: HTTPS, full IP address logged, and web form email

WayneWestPhotography wrote:

#3 2013-04-25 20:28:14

Re: Enhancement request: HTTPS, full IP address logged, and web form email

WayneWestPhotography wrote:

#4 2013-04-25 20:51:04

Re: Enhancement request: HTTPS, full IP address logged, and web form email

rvelices wrote:

WayneWestPhotography wrote:

#5 2013-04-25 20:52:31

Re: Enhancement request: HTTPS, full IP address logged, and web form email

rvelices wrote:

WayneWestPhotography wrote:

#6 2013-05-03 12:26:15

Re: Enhancement request: HTTPS, full IP address logged, and web form email

WayneWestPhotography wrote:

Board footer