password-protected directories: not really protected?

waspking

Just found that about 100 of my original photos were downloaded, even though the folder was password protected.

In fact, right now anyone can download a photo using:

http://www.beetography.com/photos/xxxxx-O.jpg

as long as that folder the original is not protected, even if it is password protected. I did not know this and left my "pending publication" folder unprotected for a long time, thinking that password protection would be enough....someone must have posted a link to my photos and in May about 65 photos were downloaded...

is this a bug? probably. why cannot individual files be protected?

Anyone can easily write a program to "mine" all the photos (originals if available) just to increment the #s in the above URL http://www.smugmug.com/photos/214111111-L.jpg...

Andy

waspking wrote:

is this a bug? probably.

Hi, I also answered you from our help desk.

I'm sorry that this happened to you - we try hard to make all the features well known. We want to assure you that password protection does indeed work at the photo level, but you must also have external links off, so that the files can't be viewed off of your website, have the files right-click protected, too. Block your Originals as well.

http://www.smugmug.com/help/image-protection

If you have any questions after reading that help page on Image Protection, let me know.

Oh and as a Pro, you can also block Larges, that's a gallery customization setting.