Advanced search  

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Pages: [1]   Go Down

Author Topic: Prevent directly linking to files - bypassing CM security  (Read 4972 times)

0 Members and 1 Guest are viewing this topic.

BlkKnight

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Prevent directly linking to files - bypassing CM security
« on: November 28, 2012, 12:55:42 pm »

Hi All

First off, thank you for producing this excellent package.

The documentation & programme is second to none.  Even better than many "paid for" applications.

Anyway, enough with blowing sunshine up your bum  :)

I'm running CM on a win 2003 R2 server using XAMPP 20/09/12 - to all intents & purposes is a fresh install.

In the area I work I need to share images to only a select few people - and I'd like to use Coppermine user controls to prevent unauthorised access.

The problem I have is that once a user can directlink to an image, he is able to share the link with unauthorised people.

Is there a way for me to prevent direct access? 

I'm not talking about hotlinking - but directly linking to a file.

EG:

http://files.physicalcompany.co.uk/images/albums/userpics/10001/ethan.jpg

If pasted in a new browser opens.
Logged

Αndré

  • Administrator
  • Coppermine addict
  • *****
  • Country: de
  • Offline Offline
  • Gender: Male
  • Posts: 15764
Re: Prevent directly linking to files - bypassing CM security
« Reply #1 on: November 28, 2012, 01:39:06 pm »

To prevent direct access to full-sized pictures, you could use this plugin: http://forum.coppermine-gallery.net/index.php/topic,74870.0.html

To prevent all pictures you'd need to make them inaccessible from the web and change the Coppermine code to use readfile() instead of linking to the pictures directly.
Logged

BlkKnight

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Re: Prevent directly linking to files - bypassing CM security
« Reply #2 on: November 28, 2012, 03:03:42 pm »

Thank you
Logged
Pages: [1]   Go Up
 

Page created in 0.017 seconds with 19 queries.