Not signed in (Sign In)

Vanilla 1.1.10 is a product of Lussumo. More Information: Documentation, Community Support.

    • CommentAuthorplatipuss
    • CommentTimeJul 29th 2008
     
    Ok, so I have put my login verification on top of the index.php so you cannot access plogger with out first logging into my web page. But the photos can still be accessed if they know the url of the imported images. Is there a way to move them into a non web accessible folder? the same with the thumbnails.

    - Platipuss
    •  
      CommentAuthorsidtheduck
    • CommentTimeJul 29th 2008
     
    platipuss,

    Try this. Create a new .htaccess file in your thumbs/ folder with the following code in it:
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{HTTP_REFERER} !^http://www.yourdomain.com/path_to_plogger_install_gallery_if_not_in_root/.*$ [NC]
    RewriteCond %{REQUEST_FILENAME} .*jpg$|.*bmp$|.*jpeg$|.*gif$|.*png$ [NC]
    RewriteRule \.(jpg|bmp|jpeg|png)$ - [N,F,L]
    </IfModule>

    Just change the "http://www.yourdomain.com/path_to_plogger_install_gallery_if_not_in_root/" to whatever you have set up on your server.
    That should only allow someone who is looking at your images through your protected Plogger gallery or if they come directly from that page as well.

    Please be advised that this will stop almost everyone, but it *is* possible to spoof your HTTP_REFERRER to make the server think the images are being accessed from your Plogger install.

    If you want to protect the original images, do the same for the images/ folder or uncheck the "Allow Full Picture Access:" in Admin -> Options (although the latter will not allow direct or indirect linking to the images, so it won't even allow your Plogger install to link to them).
    • CommentAuthorplatipuss
    • CommentTimeJul 30th 2008
     
    Good thinking but i will just,
    <code>
    deny from all
    </code>

    in the .htaccess, is this ill advised.
    •  
      CommentAuthorsidtheduck
    • CommentTimeJul 30th 2008
     
    you can add "deny from all", but then your thumbnails will probably not show up when viewed from your protected gallery either. :-)
    The code I posted above should allow your protected gallery to access the thumbnails, but nothing else.