hi Joachim,
That's why I suggested to bundle only the plugin and the bridge file with the release. Users would still have to visit your site to get the stuff that needs to go into the joomla folder.
The joomla component is very basic. All it does is displaying the {COPPERMINE_TEMPLATE_HTML} tag inside Joomla.
This way the bridge can capture Joomla output and replace this tag, by the output of the gallery.
There's even a way to use no joomla component at all, it just might be more complicated to explain.
Another possible way would be to force end users to visit your site by giving out API keys (similar to what wordpress and akismet are doing) and performing a check against the API key in the bridge manager. This way, you could force the end user to visit your site as well. Imo your request is legitimate to force people to visit your site.
well that's a bit a weird solution. At least when people visit website they take few minutes to read some instruction.
All of this looks like a dumb problem

... Probably I should write true interesting articles, instead of giving away stuff, and then expecting people to come back.
This way, much more users would learn about your bridge file imo.
Lot of people already know it I think.
But I guess people will adopt it more easily if it's officially supported by Coppermine.
Why do you do that? That's not a bright move imo - you're deliberately ruining the additional security that is created by using Inspekt.
I'm not ruining the security introduced by Inspeckt at all.
But you have to be aware of the logic the bridge, that's why I bring this to your attention.
I proceed this way:
1- restore some superglobals
2- call the full joomla install (yep, joomla included like a 'vulgar' script).
3- destroy again superglobals.
Because I cannot predict how Joomla will handle all superglobals (that's a big CMS), I'm just giving it all the superglobals it can expect. In a similar way, Joomla destroy all globals at begin, and I have to bypass this otherwise all Coppermine globals will be destroyed and it won't work.
I think I've done my best regarding security , just be aware that the bridge is a different "beast". Joomla and Coppermine,
are both handling in different way security, and I'm just ensuring that security solutions adopted by both script is not breaking logic adopted by my bridge.
"Final problem", I currently know: Coppermine & Joomla are using same class PHPMailer. Usually Joomla doesn't load by default the
class PHPMailer, and hence no conflict occurs. But I got once a user complaining that a conflict occured .
I've told more or less all the potential problems.
Once you understand that the full Joomla install is included inside Coppermine by the bridge, you should realize all that it implies.