Hello,

Dreamhost installed Zenphoto for me on their servers over here: http://easter2008.blogbypass.com/ - I have one album in there so far, and as you can see, it is invisible - which is what I wanted.

I set a password for the gallery in the admin panel.

However, I don't see a place for anyone to be able to log into to see the album/gallery?

Any clues anyone?

Thanks in advance

Paul

p.s. _ and I noticed that the Archive link on the page allows access to the album when I'm logged out?? Does that mean that anyone can access those photos??

I see the password form as expected. What do you mean? And if you try the archive link you will see that you get the same password form. (of course only if you are not logged in).

The way passwords work is that when someone visits the page and is not logged in, a password form is displayed instead of the page. I suspect that you have not logged out as the admin and that is why you do not see the password form. Try logging out and see if things are better.

The archive page is also password protected (but i think this is only in a fix in the nightly builds.) So, if someone clicks the link they will get a logon form.

Ah Ha! It is something for more devious than that chaps!

Cookies.

I'd logged out as admin, cleared the cookies from the zenphoto.org admin domain, but had not cleared the cookies from the http://easter2008.blogbypass.com/ domain, (don't ask me how they were generated - it must be part of the software installation/setup).

Once I'd cleared the cookies and refreshed the homepage, up popped the password log-in box.

Thanks for all your help.

Paul

Cookies are part of Zenphoto because I get prompted to set using Camino (Mac). HOWEVER, If you use Safari (Mac) your cookies are set automatically. If using PC Internet Explorer, they are set by default to be accepted so you never know they exist. Zenphoto may not be scripted to clear on exit. AND even if it is, doesn't mean the browser (any) obeys! I always clear mine manually.

Zenphoto leaves the login cookies around so you don't have to log in each time you connect. When the admin logs out that cookie is cleared. There is no "logout" for the password protected ablums.

I do the manual check as I don't always log out. Camino has a different method than Safari with cookies so, it's a habit.

No, Safari has no different habit, it's just a matter of how it's setup to handle cookies (the default may be except all though).

Camino allows you the option to accept cookies each time OR accept for current session only. Safari does not (1.3.2). You must eat cookies.

Also, Dreamhost does not install the ZP files into the user's directory. That's why I didn't use their install after seeing ZP has such an easy install (compared to some others I use). And, they don't do the nightly builds, of course.

No, I am really sure that Safari 1.3 has options to accept cookies always, never or only of vistited websites. Even 1.2 had it. Look under Preferences > Security.