Link to home
Start Free TrialLog in
Avatar of nysurf1
nysurf1

asked on

Photo Album qa

Hi all ,
I am beta testing a new application I have been working on , it is a flash photogallery with a php admin where you can upload photos and videos .
I am looking for bugs , comments , suggestions etc . (at this point especialy bugs)
This is where you can test it - www.myealbum.com
Points will be devided between 5 selected galleries (that tryed all the features photos , videos and customise options)
Thanks
ASKER CERTIFIED SOLUTION
Avatar of BOTA-X
BOTA-X
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of nysurf1
nysurf1

ASKER

very good points and im ready to close this question , just one question to bota-x , how do i prevent the visitor to see the photos directory ?
I tryed to change the file permissions but im not sure what permissions should i have there (in this folder i am copying and deleting photos via the apache user).
I guess one simple solution will be just to add an index page to every folder but it sounds very easy to break .
Another option im thinking of is through the apache configuration rewrite mode .
Which do you recommend (or maybe something else ...)
Thanks
Nysurf,
1 - You should certainly put an index.htm in each and every directory, which would redirect the curious to some other place. A simple file to do that would be
<html><HEAD>
<meta http-equiv="refresh" content="0; url=http://myhome.com">
<SCRIPT language="JavaScript">
<!--
window.location="http://myhome.com";
//-->
</SCRIPT>
</HEAD></html>
This solution is instantaneous, and no special tuning is needed
2 - You may then work on some tuning, playing with access rights and/or mod_rewrite. Some trial and error and debugging "might" be needed.
Along the rights you may consider:
= allow access to these image files just from the server itself. This can be enforced just by access rights (ideally, like a chmod 400 allowing read access just to owner, and no access to group or other users- but depending on your web server setup, it might be necesssary to allow group access, ie like chmod 440) and/or by a mod-rewrite based on referrer
= if your modules access to the files as files (with fully qualified directory path) and not as http hyperlinks, block access to the directory thru .htaccess, making forbidden any direct access to the directory thru a browser/ apache.
Yah, just create an index.html whenever your script creates a gallery.  It can be 0 length.