View original sized photos be removing the thumb_ prefix View original sized photos be removing the thumb_ prefix
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

View original sized photos be removing the thumb_ prefix

Started by MerNion, July 02, 2005, 01:06:30 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

MerNion

I have added the "trick" with !USER_ID in order visitors not to see the displayimages.php page but in the thumbnails.php where it shows the thumbs of the images if you right click on the image and you copy the image url you get this:
http://www.somedomain.com/images/albums/album_name_/thumb_000692.jpg

If you then just paste http://www.somedomain.com/images/albums/album_name_/000692.jpg  (without the thumb_ prefix) you see the original sized image....

Any ideas how to prevent that?

(sorry if this has been discussed somewhere else but from a simple search i did i din't find anything)

Joachim Müller

no, if someone knows how coppermine works, he will be able to get the full-size image, there's no known workaround yet.

MerNion

I managed to do that with the use of .htaccess file and the rewrite engine.. if someone requests an image in this folder and he was not referer there by my domain, he then gets redirected to another page.

Stramm

Disadvantage is that all Norton users won't be able to browse your site cause Norton deletes the referrer info (and some other firewall/ privacy products as well)

MerNion

Yeah, i know that and i was very worried when i was adding this htacces file.
But from the stats of the site, i have only seen a 2% of 403 errors