Hello there
i really want to thank you for making zenphoto available as an open source,

i just moved from gallery2 to zenphoto because of its simplicity it took me only hour to setup my gallery with 656 photos

Put the folder(sub folder) with photos through FTP and let zenphoto make the gallery and sub galleries is really great option and total peace of mind

i got time out error while building the gallery but i found the solution i modified the php.ini with execution time out from 30 to 120 and everything worked just fine.

i found documentation little difficult to find as an new comer to zenphoto, not found much stuff for security thing, is there any direct link where i can see security related documents ?

i am from joomla! backround and will like to know some modifications for security

here are the options

1. Block admin access only by my IP
2. Move configuration file outside the public directory (outside public_html)
3. put empty index.html in all folder

i will add some more options if found.

thanks

There is no consolidated document, but these forums and the zenphoto web site contain much information.

As to security:

1. You can make a modification of the functions-auth.php file to add whatever checks you like.

2. Without a configuration file how would zenphoto know where to find the configuration file? Seriously though, we have no plans to move it from the zp-config.php folder although that should be possible.

3. You could do that, but can't you also configure your server not to allow browsing of folder file structure?

thanks for reply

for option 2.

i did following

in configuration file i added only this line

<?php
require( '/home/user/imp/gal.conf' );
?>

chmod it to 400

i moved the original zp-config outside public_html remaned it to gal.conf

is it good solution ? more secuer?

this tip is from joomla security

for option 3. can you please tell how to configure the server ?

thanks

#2 sounds reasonable.

#3 Ask your service provider.