Force and album to display on specific page?

  • Resolved The Art Monkey

    (@the-art-monkey)


    6 years, 8 months ago

    Hey Opa,

    Is there a way to make an album only show up on a specific page? The situation I am looking to address is a member site where the owner wants to have albums that are open to all and albums that are member only. Here’s and example of the issue:

    Free page
    mywebsite.com/free/?wppa-occur=1&lang=en&wppa-slide&wppa-album=1&wppa-photo=1

    Member page
    mywebsite.com/member/?wppa-occur=1&lang=en&wppa-slide&wppa-album=2&wppa-photo=2

    Cutting and pasting the album info and image info will allow the free page to display the gallery on the member page
    mywebsite.com/free/?wppa-occur=1&lang=en&wppa-slide&wppa-album=2&wppa-photo=2

    Is there any want to prevent this? I’m created a master album for members and free subscribers and wonder if I can lock the sub albums underneath to their parent?

    Any help is appreciated.

    Art

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author Jacob N. Breetvelt

    (@opajaap)

    Hi Art, long time no see…

    If you tick Table IV-A6.1 AND 6.2, the url will look like:
    mysite.com/hello-world/?wppa-occur=1&wppa-slide&wppa-album=c71f893cd1a5&wppa-photo=dfdf1819524c

    I guess the ‘hackers’ guess the album id (2) in your example to see the protected album, and i am sure they will not be able to ‘guess’ c71f893cd1a5 as album id.

    Maybe this helps.

    For more info: https://wppa.nl/docs-by-subject/privacy/

    Thread Starter The Art Monkey

    (@the-art-monkey)

    Opa!!

    Thanks that does help a lot. I did the conversion of to encrypted files and am reading the other documentation.

    I have a followup question though – if someone was to subscribe then cancel their membership. It’s still possible to grab the old album code and image code and paste it into a free album to grant full access to a member album.

    The encryption definitely helps though! I was wondering about making things a step or so more secure by perhaps not allowing albums to be displayed unless they are on a certain page? I’m open to any ideas that effectively lock out any cut and paste link foolishness.

    In the meantime is it possible to ‘rebuild’ the encrypted links periodically to ensure links stay varied?

    Thanks again Opa! Super helpful information!

    Art

    Thread Starter The Art Monkey

    (@the-art-monkey)

    Also, I did convert use Table VIII-A10 and converted to the Tree system. You mention in the docs there are some speed benefits to this too?

    Thank you!

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    In Table VIII-A13 and VII-A14 you can renew the cryptic codes. Click the Start! button and stay on the page until it says: Ready 0

    Note: This invalidates all the – possibly saved – urls. If a visitor opens a page that contains links – before you hit the DoIt button = and clicks on the link after you changed the codes, his action will fail (nothing found) and he has to reload the initial page. Not a big issue, but you should know this in case a user encounters this accidently; also, do not do this every hour because of this effect.

    There is no way to restrict albums to or from a particular page. This is because of the architecture of the wppa system and can not be changed.

    Thread Starter The Art Monkey

    (@the-art-monkey)

    Ahh!! Ok!

    Kinda though the restriction thing might not be able to happen but the rebuilding of the cryptic codes is doable!

    Maybe for later there could be a ‘Renew Cryptic Codes for Albums’/’Renew Cryptic Codes for Photos’ every X days options as an added security measure. I’d use that for sure!

    Thank you again OPA! Very helpful knowledge! I appreciate it!

    Art

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    Maybe for later there could be a ‘Renew Cryptic Codes for Albums’/’Renew Cryptic Codes for Photos’ every X days options as an added security measure. I’d use that for sure!

    I almost asked if you would like such a feature. I will implement it, for sure!

    Thread Starter The Art Monkey

    (@the-art-monkey)

    YES!

    Two separate periodical renewal setting (one for albums and one for images) would probably solve 99.9999% of what I am talking about. Maybe even better than locking the albums down!

    Thank you Opa!

    Plugin Author Jacob N. Breetvelt

    (@opajaap)

    Version 6.8.04 will have:
    Table VIII-13.1 and Table VIII-14.1 to schedule the regeneration of crypto codes on a regular basis.
    You can select: —off—, 1 hour, 1 day, 1 week or 1 month. The actions are performed by background processes; the time intervals are approx.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Force and album to display on specific page?’ is closed to new replies.