Group with batch upload files option Group with batch upload files option
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Group with batch upload files option

Started by Sandy, March 08, 2005, 10:59:32 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Sandy

Hi all,

I want to do a group with the batch upload files option.

I have some users with FTPs accounts on my server, and I want to give them the option like I have for upload masive files (batch), the idea is create a users group with that button but with no admins permissions.

Can somebody help me?

Excuse my english  :-\\

Joachim Müller

you mustn't grant users FTP-access to your server, as this is VERY unsecure - I strongly suggest you review this idea! However, there is only a check in searchnew.php (the file that is being used for the batch-add process) that looks wether the logged in user is the gallery admin and gives an error if the user is not. To accomplish the searchnew process being available for "regular" users, you would have to modify the check in searchnew.php to additionally check if the user is member of the "privileged" user group (do not remove the check alltogether!). Additionally, you would have to modify the navigation menu for the special group members to have a link that points to "batch-add" as well.
Again: I advice not to do what you're up to, it's a very high security risk - you have been warned! However, if you insist to do as requested, you will have to do some additional coding - afaik this has been requested before already, you might want to search the board for a copy'n paste solution.

Joachim

Sandy

Ok, I Going to try it, the user i have with FTP account, there are special friends.

And the path FTP account fot the users is in: /albums/username, for security...

Joachim Müller

this is not secure - not at all. Even if those users are your friends, they could break things because they don't know what they're doing, or an attacker might use the weakness (security hole) of your server, it doesn't necessarily have to be your friends who ruin your security.

Joachim