forum.coppermine-gallery.net

No Support => General discussion (no support!) => Topic started by: HumanNature on April 10, 2004, 10:35:57 pm

Title: in HotScripts... and some questions
Post by: HumanNature on April 10, 2004, 10:35:57 pm

First of all I apologize about my bad english

I have read this in HotScripts member´s review:

"The password and permission code is very poor. It stores the passwords in plain text in the database, and also stores the passwords in a cookie while browsing, making it very easy to crack"

¿Is this true?

APart of this I want to make some questions:

1.- ) ¿Does coppermine suport a huge site with 5000 fotos? ¿There are any site working with this amount of pics?

2.-)  Can I Integrate Coppermine with PHPBB2 2.0.8 if the forum and the gallery are in diferent servers, paths, and domains?

Forum -> SERVER 1 - WWW.DOMAIN1.COM/FORUM
cOPPERMINE -> SERVER 2 - www.DOMAIN2.COM/GALLERY

Thanks a lot :)

Title: Re: in HotScripts... and some questions
Post by: athlonkmf on April 11, 2004, 12:08:11 am

Quote from: "HumanNature"

First of all I apologize about my bad english

I have read this in HotScripts member´s review:

"The password and permission code is very poor. It stores the passwords in plain text in the database, and also stores the passwords in a cookie while browsing, making it very easy to crack"

¿Is this true?

Yes. But the password aren't saved in the cookie as far as I know. I've integrated it with invisionboard, so everything's fine.

Quote

APart of this I want to make some questions:

1.- ) ¿Does coppermine suport a huge site with 5000 fotos? ¿There are any site working with this amount of pics?

I think so. At least mine has 7500 pics already. Going up very fast too.

Quote

2.-)  Can I Integrate Coppermine with PHPBB2 2.0.8 if the forum and the gallery are in diferent servers, paths, and domains?

Forum -> SERVER 1 - WWW.DOMAIN1.COM/FORUM
cOPPERMINE -> SERVER 2 - www.DOMAIN2.COM/GALLERY

Thanks a lot :)

Different servers? no. Same server and different domains? yes.

Title: in HotScripts... and some questions
Post by: Joachim Müller on April 11, 2004, 09:00:24 am

correction: same servers and different domains: as well no! Have to be on same domains, since integration is cookie-based, although the passwords are not stored in the cookie. Ther correct answer is: server doesn't matter, but it must be same domain and same mySQL database.

This so-called "review" on hotscripts is, urm, written by someone who doesn't know very much about coppermine - some things he posted are just wrong...

There have been several discussions about plain-text passwords vs. encrypted passwords in the past, so I won't repeat this discussion here, please search the board if you want to find out the details.

Coppermine has been reported to work with > 100,000 pics in the database.

GauGau