??? Using an <img src= statement to access photos in a password-protected gallery

denisegoldberg

I was just answering a question for someone in the HOW TO match your blog to your smug site (blogger-specific) and I realized that I don't know if what I am seeing is the correct behavior.

The question was about referencing images in a blog (or any site outside of the smug site) where the images are in a gallery that is password-protected. I was curious, so I tried it in my "play" blog.

If I explicitly reference a photo with an <img src= statement and that photo is in a password-protected gallery, the photo is still displayed.

If I also use an <a href= statement to allow a click on the photo to jump to the gallery, a click brings up the password page (as expected).

The question?
Should I be able to use an <img src= statement to show a photo outside of smug where that photo is in a gallery that is password-protected? Or is this a bug?

Blog entry that shows this behavior is at http://denisegoldbergplays.blogspot.com/2010/01/show-photo-from-password-protected.html. Warning - this is a play blog and a test gallery, so if you are looking at this sometime in the future it may have changed...

--- Denise

Allen

denisegoldberg wrote:

I was just answering a question for someone in the HOW TO match your blog to your smug site (blogger-specific) and I realized that I don't know if what I am seeing is the correct behavior.

The question was about referencing images in a blog (or any site outside of the smug site) where the images are in a gallery that is password-protected. I was curious, so I tried it in my "play" blog.

If I explicitly reference a photo with an <img src= statement and that photo is in a password-protected gallery, the photo is still displayed.

If I also use an <a href= statement to allow a click on the photo to jump to the gallery, a click brings up the password page (as expected).

The question?
Should I be able to use an <img src= statement to show a photo outside of smug where that photo is in a gallery that is password-protected? Or is this a bug?

Blog entry that shows this behavior is at http://denisegoldbergplays.blogspot.com/2010/01/show-photo-from-password-protected.html. Warning - this is a play blog and a test gallery, so if you are looking at this sometime in the future it may have changed...

--- Denise

I get the password page with your link. Did you clear Smug cookies that
remembers the PW? The direct photo will work as long as external links are
on.
http://www.denisegoldberg.com/photos/580884474_ay7Qg-M.jpg

denisegoldberg

Allen wrote:

I get the password page with your link. Did you clear Smug cookies that remembers the PW? The direct photo will work as long as external links are on. http://www.denisegoldberg.com/photos/580884474_ay7Qg-M.jpg

Thanks Allen.

I get the password page with the link but not with the direct photo display.

It was the direct photo display that I was questioning. From what you are saying, this is working as expected then - the direct link works without a password. I wasn't sure because the photo is in a protected gallery. And yes, external links are allowed in that gallery.

--- Denise

jfriend

denisegoldberg wrote:

Thanks Allen.

I get the password page with the link but not with the direct photo display.

It was the direct photo display that I was questioning. From what you are saying, this is working as expected then - the direct link works without a password. I wasn't sure because the photo is in a protected gallery. And yes, external links are allowed in that gallery.

--- Denise

If you ask me, you are playing with fire to use a direct link to a photo in a password protected gallery. It may work now, but some would think that access without a password is technically a security violation so Smugmug could change it at any time. If it were me, I'd make a copy of the photo into an unlisted gallery and link to it there.

denisegoldberg

jfriend wrote:

If you ask me, you are playing with fire to use a direct link to a photo in a password protected gallery. It may work now, but some would think that access without a password is technically a security violation so Smugmug could change it at any time. If it were me, I'd make a copy of the photo into an unlisted gallery and link to it there.

Agreed. I've added a note to the other thread with your suggestion. Thanks!

I was actually quite surprised that it worked.

If I had a gallery that was password-protected I wouldn't place photos from that gallery in an unprotected blog entry; I was asking the question for someone else.

--- Denise