Security problem

jacenty

I got album with few photos...

That's link to one photography:
http://www.blah...blah.com/portrets/_MG_4148-Edit.jpg.php

And problem is:
If I edit this link in webbrowser to:
http://www.blah...blah.com/albums/portrets/_MG_4148-Edit.jpg

I got access to full size photos without any restrictions EVEN if album was password protected!
Can secure and fix this somehow?

sbillard

Please search this forum for the topic of protecting folders. You have two choices here on what to do. You can place your album folder external to the WEB browser path or you can implement .htaccess security on the album folder.

Both these choices have a downside. Any browser based image viewer (such as flash players, Thickbox, ect.) will also not be able to access the full sized image. So you will potentially lose some functioality.