coppermine-gallery.com/forum

Support => cpg1.3.x Support => Older/other versions => cpg1.3 Upload => Topic started by: Sandy on March 08, 2005, 10:59:32 AM

Title: Group with batch upload files option
Post by: Sandy on March 08, 2005, 10:59:32 AM
Hi all,

I want to do a group with the batch upload files option.

I have some users with FTPs accounts on my server, and I want to give them the option like I have for upload masive files (batch), the idea is create a users group with that button but with no admins permissions.

Can somebody help me?

Excuse my english  :-\\
Title: Re: Group with batch upload files option
Post by: Joachim Müller on March 08, 2005, 11:38:48 AM
you mustn't grant users FTP-access to your server, as this is VERY unsecure - I strongly suggest you review this idea! However, there is only a check in searchnew.php (the file that is being used for the batch-add process) that looks wether the logged in user is the gallery admin and gives an error if the user is not. To accomplish the searchnew process being available for "regular" users, you would have to modify the check in searchnew.php to additionally check if the user is member of the "privileged" user group (do not remove the check alltogether!). Additionally, you would have to modify the navigation menu for the special group members to have a link that points to "batch-add" as well.
Again: I advice not to do what you're up to, it's a very high security risk - you have been warned! However, if you insist to do as requested, you will have to do some additional coding - afaik this has been requested before already, you might want to search the board for a copy'n paste solution.

Joachim
Title: Re: Group with batch upload files option
Post by: Sandy on March 08, 2005, 06:46:35 PM
Ok, I Going to try it, the user i have with FTP account, there are special friends.

And the path FTP account fot the users is in: /albums/username, for security...
Title: Re: Group with batch upload files option
Post by: Joachim Müller on March 09, 2005, 10:31:13 AM
this is not secure - not at all. Even if those users are your friends, they could break things because they don't know what they're doing, or an attacker might use the weakness (security hole) of your server, it doesn't necessarily have to be your friends who ruin your security.

Joachim