News:

CPG Release 1.6.29
During HTML5 upload, keep pseudo blank code 200 messages from triggering error condition
added Russian language
correct failure to use theme menu icons in album manager
minor vulnerabilities mitigation

Main Menu

security question

Started by nufel, February 02, 2004, 10:38:06 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

nufel

Hello,
I made my gallery available only for registered users. But I noticed that any user can browse the pictures by typing this url :
http://mywebsite.com/coppermine/albums/userpics/pic1.jpg
He has to know the name of the picture of course, but anyway is there a mean to prevent someone from doing it ?
Thank you.

Joachim Müller

no! That's the way all galleries work (or, generally speaking, the whole www works). There's currently a discussion on the dev board (non-publicly) - there's a way to avoid this, but it's rather resources-eating and hasn't been coded yet (just an idea, not more). If you have pics that must remain private under all circumstances, don't publish them on the internet at all!

GauGau

nufel

thank you for your answer.