How to add website links under each image in gallery How to add website links under each image in gallery
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

How to add website links under each image in gallery

Started by anjou, January 10, 2010, 06:06:56 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

anjou

I have a single gallery of art from various artists that I post (not the artist) and have been trying for several months to add a link back to each artist's website.  I do not know bbcode or anything more advanced than HTML.  I am using Coppermine Photo Gallery 1.4.25 (stable). 

I have tried some of the solutions on here, but none have worked so far:
http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode
http://forum.coppermine-gallery.net/index.php/topic,36302.0.html

Also, I see warnings about links enabling someone to hack your site, so want to make sure I am using the latest safe code, once I figure out what to use.

My website is:  http://pearathon.com/cpg/index.php

In addition, someone posted this line that I see when I log in:
The PHP setting register_globals is enabled on your server, which is a bad idea in terms of security. It's strongly recommended to turn it off. [more]

Thank you for any help.

Joachim Müller

#1
Quote from: anjou on January 10, 2010, 06:06:56 PM
I have tried some of the solutions on here, but none have worked so far:
http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode
Then you must have read
Quote
(*) As of cpg1.4.21, the bbcode tags [img] and [url] are no longer processed properly. These two tags can be used to launch an attack against your website called a Cross-Site Request Forgery attack (CSRF definition). In such an attack a user puts a malicious link in an [img] or [url] tag and can gain control of your website. With such a serious vulnerability, the Coppermine dev team removed processing of these tags to address the immediate risk of such an attack. This is not a final solution but a necessary one.

As you can see above, no links are displayed for [url] tags, but you will see the link either as plain text or as a mouse-over/tooltip on the image next to the link text: . For [img] tags, a placeholder image () is shown with the mouse-over/tooltip showing the image link.

We realize that some administrators will want to process [img] and [url] tags correctly. The Coppermine dev team is working on a solution for cpg1.5 and also one that can be applied to cpg1.4. Information can be found on this thread on the Coppermine support forum. For those who want to hack the code themselves, the relevant function is bb_decode() in include/functions.inc.php. Please be very careful to address CSRF attacks and read as much as you can about them before going live on your website with your hacked fix.
and have no doubt followed the link to http://forum.coppermine-gallery.net/index.php/topic,58309.0.html as well.

Quote from: anjou on January 10, 2010, 06:06:56 PMbut none have worked so far
What exactly did you try to do? And what should "none have worked" mean? That's not a valid report nor a valid question.

Quote from: anjou on January 10, 2010, 06:06:56 PMIn addition, someone posted this line that I see when I log in:
The PHP setting register_globals is enabled on your server, which is a bad idea in terms of security. It's strongly recommended to turn it off.
Nobody "posted" that - it's part of coppermine's code to display that message to the admin to make him aware of the register_globals issue. Now be a good little coppermine admin and do as the warning message suggests. If you have no idea what to do, you might want to click the little "more"-link... ::)

anjou

"What exactly did you try to do? And what should "none have worked" mean? That's not a valid report nor a valid question."

I don't remember each solution that I have tried to get the website link that I am trying to establish to work as a clickable link, but these are two from the coppermine instructions that I tried most recently, and neither worked. (http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode)

# Url Text => Url Text
# http://yoursite.com => http://yoursite.com

I inserted the code line in the description below the image, but what I inserted showed up as the full line of code, not a link.

I have read as much as I can that appears to be related to my problem, but so much of it makes no sense to me that I should probably just make my own "plain-jane" generic HTML website and forget the Coppermine gallery.

In regard to the line about register_globals issues, when I clicked the link, it showed a person's name to the left, so I was not aware it was from Coppermine.

Thank you for your time.

Joachim Müller

So the entire section I quoted in my previous posting (taken from the docs) doesn't mean anything to you? You don't get the point and you still try to use the bbcode tag [url] although the text I quoted clearly says that you can no longer do that? You haven't understood that you will have to modify coppermine's core code to accomplish the parsing of the url-tag once again?

anjou

Your kind and patient attempt to communicate with me has obviously resulted in great frustration. Because of my initial audacity in even asking a question, my blazing stupidity which you have pointed out in both of your answers, and my inability to incorporate the most basic of instructions on the Coppermine documentation page and forum, please delete this post, as comprehension is futile.