[Ids-devel] passwording albums

[Craig M. <9j...@ql...>]

Hi,

I was having issues using .htaccess files to password protect my albums
effectively as IDS would always generate a page of HTML with the image name.

I have made some changes so you can now protect albums by putting a
.htaccess file in the album's directory and when ids sees that it checks to
see if you have an authentication cookie for that album, if not you are
given a login screen and the cookie is set.

it is far from done as sub-directories are not protected so a user could
view albums beneath a protected album if they knew the name, and knowing the
URL to an image they could view it directly as well. I plan to upgrade my
apache past 1.3.12 so i can use setenvif directives in .htaccess files and
only allow images to be sent if the refferrer is IDS.

A lock icon is also overlayed on album-preview images.

I don't know if anyone else wants this functionality, but you can see a demo
of it at http://mcfetridge.com/gallery/ids-0.71/

the username ids and the password is devel.  my server is only a p166 with
64 megs of ram so it is a little slow.


If someone tells me how i would love to submit a patch and have this become
part of the standard IDS. is it just done with diff?

Craig McFetridge