Big changes to SmugMug's privacy and security released

Andy

Andy wrote:

Could be. Dev will ck with Omar.

I validated, I will ask Dev to hook Omar up with what he needs

Thanks!

TexasFamily

shg wrote:

DA, you're making a comment on the behavior of Internet Explorer, not on a deficiency with Smugmug. If you were using a different browser you would either see the whole URL or be able to resize the Properties window.

If you are set on using IE under Windows, I find the easiest way to copy long URLs from an IE Properties window is to click anywhere on the segment of URL that is visible then hit CTRL-A CTRL-C -- that is "click, select all, copy".

HTH.

you can also double/triple click on the url to select it all (even if you can't see it all)...(triple click if it has any spaces)
then right click copy...

we have to use ie at work... ;(

Edward

afarber

DJKennedy wrote:

As per Andys request to post this here:

Yesterday I've noticed that my Recent Photos Gallery hack (link off of my navbar) no longer works. Using FF2 gives me server cant be found, IE7 gives me page can not be displayed, and FF leaves a URL in the addy bar of .smugmug.com although at least IE shows the proper URL.

I never made any changes at all, so I'm assuming that SM made a change at some point (from my email from Andy: Hi Derek,
It's likely to do with the new SmuKeys that are being used.)

Did you guys make a change that I'm not aware of, should I for now remove that link from my navbar? (I hate broken links on a page!)

Derek

My Recent Photos still works. It's also a link from my navbar. I'm not sure what the difference is, but it may be that all my recent galleries were in place before this change. Did you create galleries since the change? I'd test it, but I don't want to break my hack before I need to.

jerryr

devbobo wrote:

Jerry,

You will probably need to test this cuz I haven't

But I believe a modified, regular expression as below should work...

re = /gallery\/([\d]+)(_(\w+))?\//;

Cheers,

David

Hi David -
Ok, here is what I discovered.
For previously created galleries, the modification abover works fine.
For galleries recently created around the new security release, it takes you to the smugmug home page.

Check it out:

Created back in the Fall:
http://jrphotos.smugmug.com/gallery/3789668

No Issues - When you click on 'Return to Album' - takes you to the
albums thumbnails.

Created o'dark early this morning:
http://jrphotos.smugmug.com/gallery/4311576

When you click on 'Return to Album' - takes you to the smugmug home page.

Any insight would be greatly appreciated - jerryr

Llywellyn

DonMB wrote:

I'm in the same situation, but I figured out how to do it. Bring up a photo in the light box and you'll see a URL like this:

http://www.pixelartifacts.com/gallery/4201785_AYPQy#245572011_cvomi-A-LB

Change 'gallery' to 'photos'. Delete the gallery number (e.g 4201785_AYPQy). Delete the extra # sign. Change the -A-LB after the photo number to -L.jpg and you get this, which works.

http://www.pixelartifacts.com/photos/245572011_cvomi-L.jpg

Thank you. LB wasn't working for me, so the solution wasn't applicable. But this morning it's all hunky-dory. Thanks for the step-by-step!

denisegoldberg wrote:

I have the share button enabled when I'm logged in, which gives me access to the page of links to just copy. In case you're interested, here's the CSS that I use:
Code:

#altViews.nav,
.share_button
{
display: none;
}
.loggedIn #altViews.nav,
.loggedIn .share_button
{
display: block;
}

</pre>
--- Denise

Swanky! Never knew about this hack. Much appreciated! <img src="https://us.v-cdn.net/6029383/emoji/clap.gif&quot; border="0" alt="" >

PBolchover

Llywellyn wrote:

Thank you. LB wasn't working for me, so the solution wasn't applicable. But this morning it's all hunky-dory. Thanks for the step-by-step!

For reference, it looks as if everyone will have to update their gallery redirects look-up table, to include the code on the end of the redirect URL.

DJKennedy

afarber wrote:

My Recent Photos still works. It's also a link from my navbar. I'm not sure what the difference is, but it may be that all my recent galleries were in place before this change. Did you create galleries since the change? I'd test it, but I don't want to break my hack before I need to.

Removing a small peice of code from the url fixed the issue. It now works as it did before.

afarber

DJKennedy wrote:

Removing a small peice of code from the url fixed the issue. It now works as it did before.

Just out of curiosity - what was the code you removed?

DJKennedy

afarber wrote:

Just out of curiosity - what was the code you removed?

I removed part of the url in the recent gallery code.

This line I deleted parts from:

sUrl = "http://www.smugmug.com/homepage/templatechange.mg?TemplateID=3&origin=http://www.djkennedy.com/date/";

I changed it to:

sUrl = "http://www.djkennedy.com/date/";

So basically I removed in the first part:

***http://www.smugmug.com/homepage/templatechange.mg?TemplateID=3&origin="]http://www.smugmug.com/homepage/templatechange.mg?TemplateID=3&origin=***
(never mind the ***'s I had to add them to keep the editor from making it a URL and making the link shorter)
Hope this works for you.

Derek

This, of course, is assuming you are using the same goto recent gallery code that I'm using.

Simply remove all the template change stuff at the beginning of it. You will still get your recent photos back.

jerryr

bumping - jerryr

<TABLE cellSpacing=0 cellPadding=4 width="100%" border=0><TBODY><TR><TD class=alt2 style="BORDER-RIGHT: 1px inset; BORDER-TOP: 1px inset; BORDER-LEFT: 1px inset; BORDER-BOTTOM: 1px inset">Originally Posted by devbobo
Jerry,

You will probably need to test this cuz I haven't

But I believe a modified, regular expression as below should work...

re = /gallery\/([\d]+)(_(\w+))?\//;

Cheers,

David

</TD></TR></TBODY></TABLE>

jerryr wrote:

Hi David -
Ok, here is what I discovered.
For previously created galleries, the modification abover works fine.
For galleries recently created around the new security release, it takes you to the smugmug home page.

Check it out:

Created back in the Fall:
http://jrphotos.smugmug.com/gallery/3789668

No Issues - When you click on 'Return to Album' - takes you to the
albums thumbnails.

Created o'dark early this morning:
http://jrphotos.smugmug.com/gallery/4311576

When you click on 'Return to Album' - takes you to the smugmug home page.

Any insight would be greatly appreciated - jerryr

Andy

jerryr wrote:

bumping - jerryr

<TABLE cellSpacing=0 cellPadding=4 width="100%" border=0><TBODY><TR><TD class=alt2 style="BORDER-RIGHT: 1px inset; BORDER-TOP: 1px inset; BORDER-LEFT: 1px inset; BORDER-BOTTOM: 1px inset">Originally Posted by devbobo
Jerry,

You will probably need to test this cuz I haven't

But I believe a modified, regular expression as below should work...

re = /gallery\/([\d]+)(_(\w+))?\//;

Cheers,

David

</TD></TR></TBODY></TABLE>

See dev's latest posts in the API forum? Thx.

jfriend

Seymore wrote:

Will it be possible for the creator to have the "key" aspect of the image to also reflect on the address line of the browser? Just makes it an easy copy/paste (again) to an image link at an outside WEB site.

Just wondering if this is doable...


Thanks...

Just click on the main image to go into the single image view and you will see the image key in the address line there. Or right-click properties on the image and see the full image URL there.

Andy

Seymore wrote:

Will it be possible for the creator to have the "key" aspect of the image to also reflect on the address line of the browser? Just makes it an easy copy/paste (again) to an image link at an outside WEB site.

Just wondering if this is doable...


Thanks...

For new images, click the "share button" and then you'll get the image address with the key.

Or, from SmugMug style, put the image in Lightbox...

Examples:

SmugMug Gallery Page


Lightbox Page

Gary Glass

Is this a side-effect of these changes: now when I login and return the gallery I was viewing, I don't see any of the "logged in" stuff, like "add photos" to gallery, or edit gallery description, etc. And the "login" link still appears at bottom of page. But when I click it, I go straight to the "logged in" screen.

Gary Glass

FYI: I'm using FF 2.*. IE7 works fine.

Gary Glass wrote:

Is this a side-effect of these changes: now when I login and return the gallery I was viewing, I don't see any of the "logged in" stuff, like "add photos" to gallery, or edit gallery description, etc. And the "login" link still appears at bottom of page. But when I click it, I go straight to the "logged in" screen.

Andy

Gary Glass wrote:

FYI: I'm using FF 2.*. IE7 works fine.

Yes it's a bug /FF2 issue, and we've fixed it internally but it's not live yet. Soon.

Details:
http://www.dgrin.com/showthread.php?t=84403

Llywellyn

Looks like the bug is also affecting the control panel in FF. It's stuck on the Stats tab for me, no matter which other tabs I click. Works fine in IE7.

Andy

Llywellyn wrote:

Looks like the bug is also affecting the control panel in FF. It's stuck on the Stats tab for me, no matter which other tabs I click. Works fine in IE7.

Try clearing your cache, or shift+refreshing in your Firefox.

Bit of a bug, our sorcerers are on it:
http://www.dgrin.com/showthread.php?t=85401

Tomkirk23

Trying to use security...
Hello -

I am attempting to secure my site, so that it is password protected. For good measure, I have chosen the settings that keep it from being searched by Google and keep it from being included in SM searches.

However, after setting the site password through Control Panel.... I access the site and enter the password to access - no problem. However, after I get in, I am prompted for a album password on my homepage as the slideshow starts. I enter the site password and it does not work! I am repeatedly prompted for an album password.

When I then login to my SM account, I still get the album password prompt! It still does not accept the site password.

Any thoughts? Prior to these few changes, my site was working fine with never a password prompt.

I have tried this from a few different PC's in the house - same results.

Any ideas?

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com
viewing password = test

jfriend

Tomkirk23 wrote:

Hello -

I am attempting to secure my site, so that it is password protected. For good measure, I have chosen the settings that keep it from being searched by Google and keep it from being included in SM searches.

However, after setting the site password through Control Panel.... I access the site and enter the password to access - no problem. However, after I get in, I am prompted for a album password on my homepage as the slideshow starts. I enter the site password and it does not work! I am repeatedly prompted for an album password.

When I then login to my SM account, I still get the album password prompt! It still does not accept the site password.

Any thoughts? Prior to these few changes, my site was working fine with never a password prompt.

I have tried this from a few different PC's in the house - same results.

Any ideas?

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com
viewing password = test

The slideshow code seems to prompt for a password anytime it can't get access. Some things to check:

• Are you sure there's no password on the gallery in question?
• If the gallery in the slideshow is unlisted, are you using the full albumID and key for the slideshow?
• Is external linking enabled for the gallery?

It's also possible that you can't have a slideshow inside a password protected account because the API access that the slideshow uses might not work. You'll need an answer from Smugmug on that one.

Tomkirk23

jfriend wrote:

The slideshow code seems to prompt for a password anytime it can't get access. Some things to check:

• Are you sure there's no password on the gallery in question?
• If the gallery in the slideshow is unlisted, are you using the full albumID and key for the slideshow?
• Is external linking enabled for the gallery?

It's also possible that you can't have a slideshow inside a password protected account because the API access that the slideshow uses might not work. You'll need an answer from Smugmug on that one.

Hi -

I have now tested this many different ways.

I am at a point where:
1) If I implement a view password, I can access the site, enter the password, and then get prompted for the album password on my front screen / slideshow. I can't get it to accept the album password. If I then login to my account, I still get prompted for the album password (which really surprises me).
2) If I simply remove the password, everything works perfectly (there is certainly no password, but everything else works - no album pasword prompting)

Some notes:
- There is no password on the gallery in question
- External linking is enabled for the gallery
- It doesn't matter if my gallery is listed or unlisted, same behavior
- The full album id and key NEVER works for the slideshow. If I remove the underscore and key, the slideshow works (if there is no view password set), regardless of whether it is listed or unlisted. (Does this sound right?)

I will post a question on the slideshow thread about whether it is supposed to work on a password-protected account.

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com

Andy

Tomkirk23 wrote:

I will post a question on the slideshow thread about whether it is supposed to work on a password-protected account.

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com

It is not, I'm sorry.

Tomkirk23

Andy -

Well, that is a bummer....

I think note of this should end up in the Flash slideshow tutorial somewhere (it may be there, I don't remember seeing it) or perhaps as a Gotcha in one of the Security discussions. Too often, developers such as myself think of security issues well after taking the time to build the functionality.

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com

Andy

Tomkirk23 wrote:

Andy -

Well, that is a bummer....

I think note of this should end up in the Flash slideshow tutorial somewhere (it may be there, I don't remember seeing it) or perhaps as a Gotcha in one of the Security discussions. Too often, developers such as myself think of security issues well after taking the time to build the functionality.

Thanks,

Tom Kirkpatrick
kirkpatrick.smugmug.com

It is there now, for sure, in big blue letters

Allen

Logged in, I just got a "this gallery requires a password" login box on a private gallery
flash show sourcing from a public gallery with ext links on and Hello's yes.
Hit refresh and show runs. And I logged in on nichname page.

Link to shows is from this gallery. Just clicked/opened "see slideshow", third
thumb, in another tab and the show runs. Can't reproduce.

Allen

Family flash slideshow
I set up a gallery to run a flash show here and it will not run. This is a family
gallery and not open to the world. Looks like the new flash show is NOT an
option for anyone with hidden/passworded family galleries and will have to
continue to use the old show or expose their family photos to the public.
What a bummer.:cry

btw, old show code runs great here and with show menu I can change
sources on the fly. Using the new show, if it worked, would required me to
create many many galleries one for each show.

btw, the show code I'm using works perfect here.

Andy

Allen wrote:

I set up a gallery to run a flash show here and it will not run. This is a family
gallery and not open to the world. Looks like the new flash show is NOT an
option for anyone with hidden/passworded family galleries and will have to
continue to use the old show or expose their family photos to the public.
What a bummer.:cry

btw, old show code runs great here and with show menu I can change
sources on the fly. Using the new show, if it worked, would required me to
create many many galleries one for each show.

btw, the show code I'm using works perfect here.

Rich and Barb are looking into it Al....

Allen

Andy wrote:

Rich and Barb are looking into it Al....

I now have the new flash show running in 32 passworded galleries and
each using passworded gallery as a source. This is the stand alone
flash code in the album description.

Only one annoyance, after entering passworded gallery with show I have to
re-enter password for source gallery even though it has the same password.
Every page refresh asks for the source PW again.

But, it's working great. Except for my IE6.:cry

Those are all in my PW'ed family area. But a public example of show running
with multiple show sources (66) in drop menu can be seen here.

richW

Allen wrote:

I now have the new flash show running in 32 passworded galleries and
each using passworded gallery as a source. This is the stand alone
flash code in the album description.

Only one annoyance, after entering passworded gallery with show I have to
re-enter password for source gallery even though it has the same password.
Every page refresh asks for the source PW again.

But, it's working great. Except for my IE6.

Those are all in my PW'ed family area. But a public example of show running
with multiple show sources (66) in drop menu can be seen here.

Allen, IE6 is working over here on gallery #4410495
I do get the same results regarding needing to enter the password twice. I'll do some checking around ....

Allen

richW wrote:

Allen, IE6 is working over here on gallery #4410495
I do get the same results regarding needing to enter the password twice. I'll do some checking around ....

Thanks for checking. I can run Flash all over the web and other embeded
flash in a Smug site but just not any Smug flash on a Smug site with IE6.
I tried every setting I could find, nogo.