General Support: HowTo: password protect albums

hi,
I manged to implement password protection per album.
You just have to make some minor changes to the code!
(I think everybody, even without PHP-knowledge will manage it)

How to use it:
every album you want to protect with a pass has to have some value in column "pass" of table "plogger_albums"

i do not care about username, you can enter what you want in the user-field of the password dialog.
(wouldnt be a challenge to add username functionality)

it also should be possible to implement the password protection on a global basis (independend of the theme). But I am happy that i managed to implement the functionality i need and do not want to invest more time for this at the moment.

i think you would be better off to create a whole plogger_user table with user/pass and id, then create another table plogger_permissions and have entries for user_id and album_id and allow_deny

then just hit the user/pass db when they login if the user/pass is good then hit the permissions table to see if they are allowed in that album.

then add a tab in the admin for users and write some stuff that would manage the users/passwords and which albums they are allowed to login to.

this would allow other functionality, like to add extra users to the admin, or other possibilities, and would scale much better than the way you have currently written it.

but i'm in no way discounting what you've done progress is progress and i'm sure others would like to use what you have.

THE CORRECT SETUP FOR ALBUM PW PROTECTION
(does not care about usernames, you can leave them blank)

step 1)
add column "pass" to table albums

step 2)
create file auth.php in the themes folder (i.e plogger/themes/lucid) with the following content:
<?php
function authenticate()
{
Header("WWW-Authenticate: Basic realm=\"restricted area\"");
Header("HTTP/1.0 401 Unauthorized");
echo "You must enter a valid login ID and password to access this resource\n";
exit;
}
if ($_GET["level"]=="album" || $_GET["level"]=="picture"){
switch ($_GET["level"]){
case "album":
$sql="select pass from plogger_albums where id=".$_GET["id"];
break;
case "picture":
$sql="select pass from plogger_albums a,plogger_pictures p where p.id=".$_GET["id"]." and p.parent_album=a.id";
break;
}
connect_db();
$sql_result=run_query($sql);
$ret=mysql_fetch_assoc($sql_result);
$pass=$ret["pass"];
if ($pass!=""){
if ($_SERVER['PHP_AUTH_PW']!=$pass) {
authenticate();
}
}
}
?>

step 3)
include auth.php to album.php in themes folder:
add "include("auth.php");" at the beginning of album.php
album.php:
<?php
include("auth.php"); //ADDED THIS LINE
plogger_get_header();
print '<div id="thumbnail_container">';
....

step 4)
do the same as in step 3 to picture.php
picture.php:
<?php
include("auth.php"); //ADDED THIS LINE
plogger_get_header();
if (plogger_has_pictures()) {
...

step 5)
step 5)
to disable download button of a password protected album:
-edit plog-functions.php in plogger folder
-go to "function plogger_download_checkbox"
looks like this now:
function plogger_download_checkbox($id, $label = '') {
global $config;
if ($config["allow_dl"]){
connect_db();
//if on page collections, have to look if albums are protected
if ($_GET["level"]==""){
$msg="";
$sql_result=run_query("select count(*) c from plogger_albums where pass is not null and parent_id=".$id);
$ret=mysql_fetch_assoc($sql_result);
if ($ret["c"] > 0){
$ret["pass"]="asdfqeeradfpoiejf";
}
else {
$ret["pass"]="";
}
}
else
{
$msg="(password protected)";
$sql_result=run_query("select pass from plogger_albums where id=".$id);
$ret=mysql_fetch_assoc($sql_result);
}
if (empty($ret["pass"]) || $_SERVER['PHP_AUTH_PW']==$ret["pass"]){
return '<input type="checkbox" name="checked[]" value="'.$id.'" /> '. $label ;
}
else{
return "$msg<br>";
}
}
else
return '';
}

I don't understand.. Where is this "step 1)
add column "pass" to table albums"...?

I am getting the same error as Rob above. Anyone succeeded on implementing this? I am using the latest version (Beta 3.0)...

Hey I am getting the same error... mvpetrovich can you elaborate on how to do all of this? I am new to PHP and I dont understand. Can you please make a step-by-step?

Thanks

I have tried to make my own password protect code but I keep getting this error below. can anyone help?

If no password is entered it works and you get the message "please go back and enter a password" as expected. But if you type anything into te password box you get this:

Notice: Undefined variable: current_picture in public_html/plog/plog-includes/plog-functions.php on line 2556

Fatal error: Cannot redeclare plogger_stats_count_total_collections() (previously declared in /home/moulton/public_html/plog/plog-content/themes/lucid/theme_functions.php:5) in /public_html/plog/plog-content/themes/lucid/theme_functions.php on line 4

I have edited collection.php collections.php and album.php. The coce for these is below:

for collection and collections I added this bit.

<!-- Now do the password auth bit -->

<form action="<?php echo plogger_get_album_url(); ?>" method="post">
<P class="style1">Password: <input type="text" name="Passw" size="20"> <INPUT TYPE=submit NAME=Submit VALUE="Send"></P> &nbsp;

</form>
<!-- end of password -->




For album.php I recreated it as this:



<?php $con = mysql_connect("localhost","username","password");
if (!$con)
{
die('Could not connect: ' . mysql_error());
}
mysql_select_db("user_plog", $con);

//grab the user entered password

$pass = $_POST['Passw'];
if (strlen($pass) <1) {
echo( "Please go back and enter a password" ); exit;
}

plogger_get_header();
$img_id = "thumb-".plogger_get_picture_id();

//checks to see if the password matches the one on file
$checkpass = mysql_query("SELECT pass FROM plogger_albums WHERE id = $img_id");
//while($row = mysql_fetch_array($checkpass))
// {
// $result=($row['pass']);
// echo "<br />";

// }
//end of checking


if ($pass==$checkpass)
{

plogger_get_header(); ?>

<div id="thumbnail-container">
<?php if (plogger_has_pictures()) : ?>
<div id="overlay">&nbsp;</div>
<ul class="slides">
<?php while(plogger_has_pictures()) : plogger_load_picture();
// Find thumbnail width/height
$thumb_info = plogger_get_thumbnail_info();
$thumb_width = $thumb_info['width']; // The width of the image. It is integer data type.
$thumb_height = $thumb_info['height']; // The height of the image. It is an integer data type.
$li_width = $thumb_width + 10; // Account for padding/border width
// Generate XHTML with thumbnail and link to picture view.
$img_id = "thumb-".plogger_get_picture_id();
$imgtag = '<img id="'.$img_id.'" onmouseout="document.getElementById(\'overlay\').style.visibility = \'hidden\';" onmouseover="display_overlay(\''.$img_id.'\', \''.plogger_picture_comment_count().'\')" class="photos" src="'.plogger_get_picture_thumb().'" width="'.$thumb_width.'" height="'.$thumb_height.'" title="'.plogger_get_picture_caption('clean').'" alt="'.plogger_get_picture_caption('clean').'" />';
?>
<li class="thumbnail" style="width: <?php echo $li_width; ?>px;">
<a href="<?php echo plogger_get_picture_url(); ?>"><?php echo $imgtag; ?></a>
<?php echo plogger_download_checkbox(plogger_get_picture_id()); ?>
<div class="tag"><?php echo plogger_get_picture_caption(); ?></div>
</li><!-- /thumbnail -->
<?php endwhile; ?>
</ul><!-- /slides -->
<?php else : ?>
<div id="no-pictures-msg">
<h2><?php echo plog_tr('No Images') ?></h2>
<p><?php echo plog_tr('Sorry, but there are no images in this album yet.') ?></p>
</div><!-- /no-pictures-msg -->
<?php endif; ?>
</div><!-- /thumbnail-container -->

<?php plogger_get_footer();



}

else
{


plogger_get_header(); ?>

<div id="thumbnail-container">
<?php if (plogger_has_albums()) : ?>
<div id="collections">
<?php while(plogger_has_albums()) : plogger_load_album();
// Find thumbnail width/height
$thumb_info = plogger_get_thumbnail_info();
$thumb_width = $thumb_info['width']; // The width of the image. It is integer data type.
$thumb_height = $thumb_info['height']; // The height of the image. It is an integer data type.
?>
<div class="collection">
<a href="<?php echo plogger_get_album_url(); ?>"><img class="photos" src="<?php echo plogger_get_album_thumb(); ?>" width="<?php echo $thumb_width; ?>" height="<?php echo $thumb_height; ?>" title="<?php echo plogger_get_album_description(); ?>" alt="<?php echo plogger_get_album_description(); ?>" /></a>
<h2><a href="<?php echo plogger_get_album_url(); ?>"><?php echo plogger_get_album_name(); ?></a></h2>
<?php echo plogger_download_checkbox(plogger_get_album_id()); ?>

<span class="meta-header"><?php echo plog_tr('Contains'); ?> <?php echo plogger_album_picture_count() . ' '; echo (plogger_album_picture_count() == 1) ? plog_tr('Image') : plog_tr('Images'); ?></span>
<p class="description"><?php echo plogger_get_album_description(); ?></p>
<!-- Now do the password auth bit -->

<form action="<?php echo plogger_get_album_url(); ?>" method="post">
<P class="style1">Password: <input type="text" name="Passw" size="20"> <INPUT TYPE=submit NAME=Submit VALUE="Send">
Password incorrect. Please try again</P> &nbsp;

</form>
<!-- end of password -->

</div><!-- /collection -->
<?php endwhile; ?>
</div><!-- /collections -->
<?php else : ?>
<div id="no-pictures-msg">
<h2><?php echo plog_tr('No Albums') ?></h2>
<p><?php echo plog_tr('Sorry, but there are no images or albums in this collection yet.') ?></p>
</div><!-- /no-pictures-msg -->
<?php endif; ?>
</div><!-- /thumbnail-container -->
<?php plogger_get_footer();

}
?>

Hello all

I have installed the password protection for each album per instructions of dzmoore in this post: http://www.plogger.org/forum/discussion/1430/howto-password-protect-albums/#Item_0 .

However I can't get it to work. (I don't understand the last insturction).

Can anyone help? Please!

I have a little problem too and as I'm not an expert with php and barely managed to get all the steps done (I did finally ;-) ) a last obstacle occured. All the steps are done and I get a password dialog with my group indicated but after entering the password I get the error message below. Please help.

Warning: mysql_real_escape_string() [function.mysql-real-escape-string]: Access denied for user 'MYLOGIN'@'localhost' (using password: NO) in /var/www/MYLOGIN/html/gallerie/plog-auth-continue.php on line 8

Warning: mysql_real_escape_string() [function.mysql-real-escape-string]: A link to the server could not be established in /var/www/MYLOGIN/html/gallerie/plog-auth-continue.php on line 8

Warning: Cannot modify header information - headers already sent by (output started at /var/www/MYLOGIN/html/gallerie/plog-auth-continue.php:8) in /var/www/MYLOGIN/html/gallerie/plog-auth-continue.php on line 13

Anyone got a hint how to solve this? Thank you very much in advance

Nils

login is password

Thank you for taking a look

click