Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Auto complete login form?  (Read 5297 times)

0 Members and 1 Guest are viewing this topic.

aymeric

  • Coppermine newbie
  • Offline Offline
  • Posts: 5
Auto complete login form?
« on: October 29, 2003, 10:10:08 am »

hi, i'm french and i don't write a lot in english so i will try!

First, thanks for ths complete program wich work very well in safe mode on!
i want to create differents groups access for each albums. (only 1 username for all my family and only one user name for my friends etc..)
My question is:

is it possible to automaticly login just by clicking on a URL with ths logins parameters? for exemple: http://mysite.com/login.php?username=friends&password=test
With this method, when i send a mail to all of my friends, they are automaticlly logged on clicking on the link.

I hope u understand what i mean:-)

thanks in advance!
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Auto complete login form?
« Reply #1 on: October 29, 2003, 10:21:39 am »

Having the login form accept vars from the url would make security very vulnerable, so I suggest not doing this.
Instead, take a look at groups: each member of your family can have his/her own username and pasword, as long as you make them members of the group "family" and let the private gallery be restricted to "can be viewed by 'family''.

If you must have it the way you set it up, tell them in the email to log in with the username and password you provide.

All those security things don't work that good on the internet: if you have photos that really, really shouldn't become public at all, don't publish them on the internet - permission settings or not.

GauGau
Logged

aymeric

  • Coppermine newbie
  • Offline Offline
  • Posts: 5
Auto complete login form?
« Reply #2 on: October 29, 2003, 10:26:47 am »

ok, thank you for your answer.

can i create only one user for the friends group for example and give the same username and password for all of my friends? is't more simple no?
the problem is for the votes and the favorites!?

my photos are not confidential but i prefers visitors wich are not loggued don't see photos of me and my family/friends u see?
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Auto complete login form?
« Reply #3 on: October 29, 2003, 11:00:29 am »

as a rule of thumb I never allow different persons to logon to any system with the same username (I'm a full time network admin in "real life").
In your case I'd have different usernames at least for each household of your family (how big is your family anyway? Are you shying away to create 20 users?).
I'd set "users can register" to "no" in config. This means only you as an admin can create users.
Then just let registered users have access to your family/friends pics.
Next create usernames for your friends and family (they automatically belong to the group "registered").
Now you're ready to roll: send an individual email to each of your users and tell them their username and password.

If you think this is too complicated, then go with your single user, but don't ask for support: you can't have comments, rating etc. then!

GauGau
Logged

aymeric

  • Coppermine newbie
  • Offline Offline
  • Posts: 5
Auto complete login form?
« Reply #4 on: October 29, 2003, 11:08:08 am »

thank you , i understand your answer...

the problem is that i have photos of a marriage of friends and i will send a mail to 100 users!! 20 i can but 100, it's too long  :(

On my site, i have photos of a travel in tanzanie/ safari and i wan't anonymous users can see these photos! but the photo of the wedding/marriage (?! vocabulary problem), i don't want everybody can see these photos!

i think i will give access to all photos for anonymous users , and i will have no problems  :)

is it really dangerous to put private photos (friends / family) on the web (no porn or erotic of course  :lol:  ) ??!
Logged

hyperion

  • VIP
  • Coppermine addict
  • ***
  • Offline Offline
  • Posts: 1317
  • - retired -
Auto complete login form?
« Reply #5 on: October 30, 2003, 02:44:59 am »

@ oasis and DJmaze:

I split the topic.  Your password protection exchange is in the General Discussion Forum under "Password Protect Albums - Theory and Practice"

-Hyperion
Logged
"Then, Fletch," that bright creature said to him, and the voice was very kind, "let's begin with level flight . . . ."

-Richard Bach, Jonathan Livingston Seagull

(http://www.mozilla.org/products/firefox/buttons/getfirefox_small.png)

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Auto complete login form?
« Reply #6 on: October 30, 2003, 08:16:56 am »

of course there's no danger in putting some wedding pics on the net. What I was going to say: if there are pics that you wouldn't want your boss/your mum/your wife to see, then don't put them on the net (not even into a "private" zone), because they tend to "leak". That's all.
I'd go for option 2: make the wedding photos available to the public: those who don't care won't have to look at it; those who do care might not be able to log in (I don't think my auntie Gertrude would be able to log in into anything on the internet - she probably hasn't found out that you can type; for her the internet is only *clicks* and that's it).

GauGau
Logged

aymeric

  • Coppermine newbie
  • Offline Offline
  • Posts: 5
Auto complete login form?
« Reply #7 on: October 30, 2003, 09:50:08 am »

lol, thanks for all :) :lol:  :mrgreen:
but the private gallery with password is a good idea  :mrgreen:

 8)
Quote from: "gaugau"
of course there's no danger in putting some weedding pics on the net. What I was going to say: if there are pics that you wouldn't want your boss/your mum/your wife to see, then don't put them on the net (not even into a "private" zone), because they tend to "leak". That's all.
I'd go for option 2: make the wedding photos available to the public: those who don't care won't have to look at it; those who do care might not be able to log in (I don't think my auntie Gertrude would be able to log in into anything on the internet - she probably hasn't found out that you can type; for her the internet is only *clicks* and that's it).

GauGau
Logged

jasendorf

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 350
    • http://www.338tharmyband.com
Auto complete login form?
« Reply #8 on: October 30, 2003, 02:52:21 pm »

Quote
of course there's no danger in putting some wedding pics on the net.
Unless of course you're worried about your mistress seeing them!

OK, bad joke, sorry...  please continue...
Logged
Read the Online DOCs,FAQ, and SEARCH the board BEFORE posting questions for help.
Pages: [1]   Go Up
 

Page created in 0.021 seconds with 19 queries.