Advanced search  

News:

cpg1.5.28 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.26 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: How to add website links under each image in gallery  (Read 1836 times)

0 Members and 1 Guest are viewing this topic.

anjou

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
How to add website links under each image in gallery
« on: January 10, 2010, 07:06:56 PM »

I have a single gallery of art from various artists that I post (not the artist) and have been trying for several months to add a link back to each artist's website.  I do not know bbcode or anything more advanced than HTML.  I am using Coppermine Photo Gallery 1.4.25 (stable). 

I have tried some of the solutions on here, but none have worked so far:
http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode
http://forum.coppermine-gallery.net/index.php/topic,36302.0.html

Also, I see warnings about links enabling someone to hack your site, so want to make sure I am using the latest safe code, once I figure out what to use.

My website is:  http://pearathon.com/cpg/index.php

In addition, someone posted this line that I see when I log in:
The PHP setting register_globals is enabled on your server, which is a bad idea in terms of security. It's strongly recommended to turn it off. [more]

Thank you for any help.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: How to add website links under each image in gallery
« Reply #1 on: January 10, 2010, 07:17:13 PM »

I have tried some of the solutions on here, but none have worked so far:
http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode
Then you must have read
Quote
(*) As of cpg1.4.21, the bbcode tags [img] and [url] are no longer processed properly. These two tags can be used to launch an attack against your website called a Cross-Site Request Forgery attack (CSRF definition). In such an attack a user puts a malicious link in an [img] or [url] tag and can gain control of your website. With such a serious vulnerability, the Coppermine dev team removed processing of these tags to address the immediate risk of such an attack. This is not a final solution but a necessary one.

As you can see above, no links are displayed for [url] tags, but you will see the link either as plain text or as a mouse-over/tooltip on the image next to the link text: . For [img] tags, a placeholder image () is shown with the mouse-over/tooltip showing the image link.

We realize that some administrators will want to process [img] and [url] tags correctly. The Coppermine dev team is working on a solution for cpg1.5 and also one that can be applied to cpg1.4. Information can be found on this thread on the Coppermine support forum. For those who want to hack the code themselves, the relevant function is bb_decode() in include/functions.inc.php. Please be very careful to address CSRF attacks and read as much as you can about them before going live on your website with your hacked fix.
and have no doubt followed the link to http://forum.coppermine-gallery.net/index.php/topic,58309.0.html as well.

but none have worked so far
What exactly did you try to do? And what should "none have worked" mean? That's not a valid report nor a valid question.

In addition, someone posted this line that I see when I log in:
The PHP setting register_globals is enabled on your server, which is a bad idea in terms of security. It's strongly recommended to turn it off.
Nobody "posted" that - it's part of coppermine's code to display that message to the admin to make him aware of the register_globals issue. Now be a good little coppermine admin and do as the warning message suggests. If you have no idea what to do, you might want to click the little "more"-link... ::)
« Last Edit: January 10, 2010, 07:32:02 PM by Joachim Müller »
Logged

anjou

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: How to add website links under each image in gallery
« Reply #2 on: January 10, 2010, 07:35:42 PM »

"What exactly did you try to do? And what should "none have worked" mean? That's not a valid report nor a valid question."

I don't remember each solution that I have tried to get the website link that I am trying to establish to work as a clickable link, but these are two from the coppermine instructions that I tried most recently, and neither worked. (http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#bbcode)

# Url Text => Url Text
# http://yoursite.com => http://yoursite.com

I inserted the code line in the description below the image, but what I inserted showed up as the full line of code, not a link.

I have read as much as I can that appears to be related to my problem, but so much of it makes no sense to me that I should probably just make my own "plain-jane" generic HTML website and forget the Coppermine gallery.

In regard to the line about register_globals issues, when I clicked the link, it showed a person's name to the left, so I was not aware it was from Coppermine.

Thank you for your time.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Re: How to add website links under each image in gallery
« Reply #3 on: January 10, 2010, 07:45:31 PM »

So the entire section I quoted in my previous posting (taken from the docs) doesn't mean anything to you? You don't get the point and you still try to use the bbcode tag [url] although the text I quoted clearly says that you can no longer do that? You haven't understood that you will have to modify coppermine's core code to accomplish the parsing of the url-tag once again?
Logged

anjou

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: How to add website links under each image in gallery
« Reply #4 on: January 12, 2010, 07:16:55 PM »

Your kind and patient attempt to communicate with me has obviously resulted in great frustration. Because of my initial audacity in even asking a question, my blazing stupidity which you have pointed out in both of your answers, and my inability to incorporate the most basic of instructions on the Coppermine documentation page and forum, please delete this post, as comprehension is futile.   
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47844
  • aka "GauGau"
    • gaugau.de
Logged
Pages: [1]   Go Up
 

Page created in 0.087 seconds with 20 queries.