Search…

X3 Photo Gallery Support Forums

Search…
 
ardeas
Topic Author
Posts: 20
Joined: 29 Jan 2011, 03:03

Not a bug, but a security failure...

02 Mar 2011, 03:32

This is not a bug, the software works fine, but there is a weak point:

It is possible by removing the address bar / index # access the directory, and then download, then steal the pics ... It's very annoying.

We would need a file we can not change the address bar.

Maybe in the next version?

Thank you very much:)
 
winph
Experienced
Posts: 236
Joined: 19 Jul 2008, 05:07

Re: Not a bug, but a security failure...

02 Mar 2011, 04:42

actually you can. Look for Useswfaddress under Settings/Settings.
 
User avatar
mjau-mjau
X3 Wizard
Posts: 14452
Joined: 30 Sep 2006, 03:37

Re: Not a bug, but a security failure...

02 Mar 2011, 04:49

You can do what winph said, although you will loose the deep-linking functionality.

Just a few comments related to this:

If you are displaying an image to the public, anyone who views this image can easily download it through a range of methods no matter what. Just to make this clear, let me point out a few things:

# All images that are viewed on the internet, it doesn't matter what format, or through what gallery, what software or what platform are always stored in the users browser-cache. Any user with a little knowledge can go into their browser cache, and find the image. It is that simple.

# Optionally, I could use a simple tool like Firebug to find out what image is loading, and then easily access it.

# I can look through your XML files and find the direct path to all your images, and then download them.

# Just because flash(Imagevue) makes it harder to download images, doesn't mean it protects them in any way realistically speaking.

# The only true way to protect your images, is to either password-protect the folder, or to watermark your images. There is no other way, not in Imagevue, and not in any other web gallery as long as they are available to the public.

Conclusion: Those who don't know how to access your images, are not the one who will likely be "stealing" your images anyway. Those that have basic knowledge will be able to steal your images if they want, regardless.
 
ardeas
Topic Author
Posts: 20
Joined: 29 Jan 2011, 03:03

Re: Not a bug, but a security failure...

02 Mar 2011, 05:05

Thank you for those quickly responses !!

So i can't protect without Watermark... I understand it...

Thank you again :)