Talk about Technologies, Software Architecture and Management

+ ADMIN: Added ChangeLog link in toolbar + ADMIN: New option for Normalize Photo Title

+ Hiding of photo counters extended to category menu + Infos, Warnings and Errors message area moved into popup overlay. For Infos and Warnings message would be removed after 8 seconds. “Errors” is closed on click. + ADMIN: Photo Metadata display mode can be switched between tabs with text/icon expanded or collapsed, text/icon with overlay, or hidden + ADMIN: Added ChangeLog link in toolbar – ContactForm plugin: Fixed form styles to make page better aligned – ADMIN: Fixed issue when under some conditions config info could become corrupted – Deprecated events to populate page header – code moved into header template – Fixed missing div in photo page – Page layout HTML 5 validation of photo page

This is second post on the topic of Piwigo Security. I have discussed use of .htaccess file and how to prevent some of the common exploits earlier. Recent discussion at the forum about image protection made me to take a look at how images are stored and what visitors can do to otherwise protected resources stored on PWG site. Protect originals This is probably most important step and would insure your original files are secure and cannot be accessed from outside. Note1: You will have to disable access to HD versions of your photos. Make sure plugins and themes you are using do not try to override settings set below Note2: I assume you do have FTP access to your site Open your Read more…

+ ADMIN: Optimized use of GreyDragon Theme to remove code duplication – Fixed issue with state of “Block for Panoramic Photo Page” not recognized properly

As a long time WordPress and Gallery 3 user I become accustomed to some detailed guidelines on how htaccess file is managed and what can be added there to improve site speed and security. Unfortunately, there is no significant documentation about that in Piwigo. So I have decided to compile sample htaccess rules you can use to achieve some of the goals above. By default Piwigo does not come with htaccess file, so there should be no apparent conflict with any of the existing auto generated content. DISCLAIMER: As with any htaccess please make use it on your own risk because your individual setup may vary from one rules below are tested for. Please read associated comments for each rule to see Read more…