Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter jreinila

    (@jreinila)

    Thank you for your answer.

    To clarify to be totally clear, I’ve to correct some “terms” for your answer. My current setup consists of four different components:
    1. Lightroom (photo editing)
    2. Alloyphoto (plugin for Lightroom which enables support to export photos straight to my WordPress gallery)
    3. NextGen gallery Pro (actual image gallery plugin for WordPress)
    4. WordPress

    So the Alloyphoto’s plugin is just a XML-RPC interface integration between Lightroom and NextGen gallery.

    And yes, your suggestion to add separate user for exporting images from Lightroom, with Alloyphoto’s plugin, straight to NextGen gallery works, but still it leaves this one user now unprotected. Of course I’ve set very long and complex username and password, so it should almost impossible to hack.

    I’ve already for response from Alloyphoto:
    “As I thought, instead of a valid XML document, the XMLRPC interface returns an HTML document, containing a “Rublon – Identity confirmation” page and that is why you are seeing an XML parsing error.”

    What I suspects is the following. When I login normally with web browser (with untrusted device), the steps are these:
    1. Login from WordPress backend panel
    2. Got the email from rublon
    3. I click the link in email, and it says that it has been verified. Also tells that I can go back to another browser tab at this point.
    4. When I open original browser tab, which I used to do login, it has changed asking me to select from “Private and trusted device” or “Public device with temporary login”.
    5. After selecting has been done with options in step 4, I get the actual access to wordpress backend.

    When I try to login from Lightroom, with Alloyphoto’s plugin to XML-RPC interface, the steps are these:
    1. I click login from Lightroom
    2. Got the email from rublon. Ip address is right, but the Web browser is: Browser on Other OS
    3. I click the verify link, and got web page saying that it has been verified.
    4. After all, I never get the separate web pages where I’m able to select between the options which was described in step 4 above (when doing normal login from web browser)

    So my suggestion is, that could it be possible to change the behaviour or the “verifying steps”? What I mean is that when user clicks the link in verify email, it could go directly to that page, where the choice between private/public device could be done. I’m quite sure that this would solve this kind of situations, if XMLRPC interface with external plugin is connected.

    Thread Starter jreinila

    (@jreinila)

    @toad75, thank you for your advice, works just fine.
    @dan Bollinger, now we just have to make notes of those lines, and re-edit the file and hope that they don’t refactor the code too much ??

    I have same problem.

    Any luck with solving it?

    Great plugin, and great job but…

    I noticed weird problem when I install Custom Contact Form-plugin.

    Nextgen-gallery stops working on my sidebar. It just shows me the spinning loading circle. Have anyone encountered to this same problem?

Viewing 4 replies - 1 through 4 (of 4 total)