![]() |
|
login for protected album not secure? - Printable Version +- ZenphotoCMS Forum (https://forum.zenphoto.org) +-- Forum: Support (https://forum.zenphoto.org/forum-1.html) +--- Forum: General support (https://forum.zenphoto.org/forum-4.html) +--- Thread: login for protected album not secure? (/thread-12424.html) |
login for protected album not secure? - Joe Sef - 2016-01-14 Zenphoto-Version 1.4.11 [26c78176cf], zpminimal. beside two public albums, I like to make one album just for a group of users. therefor so the new user now sees the new album if he is logged in, ok, but when he logged out (frontend-website logout) and even then: everyone still can see and who signed by rss for the gallery, get a text+thumb-notifications about every new photo, uploaded in the non-public gallery. does I proceed in a wrong way, to realise a protect album? best, login for protected album not secure? - acrylian - 2016-01-14 Not public/not published is not the same as protected. Please take a look here if that answers your questions: Quote:when he logged out (frontend-website logout) everyone still reach , only when he logout from admin-edit.php self, he is realy out. login for protected album not secure? - Joe Sef - 2016-01-15 hey acrylian, so you manage the rights by (not) setting a hook for an album 'and' for each picture. After you create a user (or a group),set only "view gallery" & give a hook to the one "managed album"
Thank you! The final problem is, that even if user is logout, the URI of the closed, protected and therefore "empty" album, e.g. "shakka", is active: . Its unaesthetic. Joe login for protected album not secure? - acrylian - 2016-01-15 We have only rights for top level albums (unless you protect it by password individually) including all sub albums and images within. The album is only protected but of course still existing so it's page can still be reached directly (as with any only unpublished album) and if it is not unpublished it will also be listed on the gallery for normal visitors. If you want to show something else like an 404 page on that occasion you probably could create a plugin to do so. login for protected album not secure? - Joe Sef - 2016-01-15
if I get on , if I'm not logged in, but thats not the 404 page, How to link in this case (not logged in and album not published) straight to the 404? Joe login for protected album not secure? - acrylian - 2016-01-15 As the article above also tells, if you don't want an album to show on the gallery you need to unpublish it. If you know the direct link you would be presented a login form for protected albums. If you don't want this default behaviour and the 404 page instead you have to write a plugin to hook into the login for protected album not secure? - Joe Sef - 2016-01-18 if I know the direct link of the unpublished NEWALBUM, I don't get to a login form, but to a webside () without content - maybe just with the comment-form. What you mean with "load_theme_script"? Thats no function but the activ Template, here zp-minimal? Best regards, login for protected album not secure? - acrylian - 2016-01-18 If you access a protected album directly you have no rights to you should get a login form on the page. Try this on our site (example of a theme without its own password page so the generic one is used: http://www.zenphoto.org/test/ Quote:What you mean with "load_theme_script"? Thats no function but the activ Template, here zp-minimal? login for protected album not secure? - Joe Sef - 2016-01-19
So just forward to the gallery-index. Album Object But I'm not to familiar with the object-programming and "safety-packaging" with privat etc. Joe login for protected album not secure? - acrylian - 2016-01-19 "show" is just the publish status. Sorry, you are on the wrong track here anyway, that is not going to work that way. You never use the persistentObject directly at all. You have to use the filter I mentioned via a plugin or possibly a theme function. I mean we had something like that a while ago. Maybe I find that. Regardless, you should get a login form on password protected albums. login for protected album not secure? - Joe Sef - 2016-01-20 hi,
The album and the images are not public when I call that: I see a page with the links "Galerie | ProtAlbumTest",the searchfield andthe footer.No login-calling or -form (except the "login"-link in the footer, because I activated the plugin)! I checked the options twice but - no way. what do you mean with "password protected albums"? Better "constricted albums"? index.php its a confusing spelling-incongruity? but Joe login for protected album not secure? - acrylian - 2016-01-20 Assigning users to manage an album and unpublishing that album is not "password protection". Then you would indeed not get a login form. There is a password form on every album edit page. It is hidden but there is written "Album password" and a lock icon next to it right below the album description field. You don't place Very roughly written in this case something like this within a plugin of the type FEATURE_PLUGIN: login for protected album not secure? - Joe Sef - 2016-01-22 thanx, but sorry, I break (may be for now), I skip the album. #+*?#$% [OT] tell me somthing like "try getAlbumLinkURL();" and ...
I tried something with rewrite_path($rewrite, $plain, $webpath = NULL) and some from (Million new terms: print_r($albumdir) nearly nothing works, I got sick! I'm sitting days about this 'stupid' basic navigation-feature, but now have not the time anymore / -lost enough, the album would becomes too bloody for me, instead having fun. again: thank you for your support so far and your always fast replies!
ciao, some with Javascript, without login-check - its nothing! /**
// echo " return $script; login for protected album not secure? - acrylian - 2016-01-22 Anything you do with JS is a redirection AFTER the theme page already loaded. I actually gave you a complete working solution that does work BEFORE the a theme page is loaded (that also why your JS will not be exectuted). All you need to adjust is what to check for to load another page. Quote: wherefor is a "cms"? (not for consumer but for programmers(-fun)) You mentioned a navigation feature. There is a menu_manager plugin if you don't want to use the basic menu function each item type has. Of course once again the theme used must have support for it or you need to add it. I can only give the advise to look at how the official themes do things like this. We sadly really can't explain everything in details That really exceeds the forum. login for protected album not secure? - Joe Sef - 2016-01-24 hi again,
&again therewith you are generating in the secret-situation only two effects there is no effect, where you present no content that should happen, if you set an album on "non-public" but - it could be! best, Joe login for protected album not secure? - acrylian - 2016-01-24 No, non public is by tradition hidden only. If you know the direct link you can access it. Password protected is just that and not hidden. If you don't want it to appear anywhere on the gallery do both. If you need a 404 page instead of an password protected album it can be done via a plugin using the filter hooks. The object model provides methods to check if an item is protected. login for protected album not secure? - Joe Sef - 2016-01-25 know everything is ok. Man, that took me so long! It is/was a little confusing, that I have to activate all Thanx! login for protected album not secure? - acrylian - 2016-01-25 Glad we could sort it out! Forgot to mention you could also try making the whole gallery protected if that fits your needs. But for just certain albums above is the best way. |