Gallery2 + integration current release secure?

Worker Joined: Jul 06, 2005 Posts: 172

I've seen some concerns here or there. I tried to do some searches, but couldn't come up with anything definitive. I'm running a pretty important site, and would like to know how safe people think the current version and integration of gallery2 for nuke is.

Anyone have input?

Sells PC To Pay For Divorce Joined: Posts: 5661

mmm, many use it....theres nothing known about any security issues..

registered · Posted: Wed Apr 18, 2007 12:59 pm

It's been sometime since I have seen a hack for it

Posted: Wed Apr 18, 2007 6:04 pm

I can tell you that the Gallery people take security seriously and there are some helpful posts in their Forums and in their Knowledgebase about security. At the same time, the issue is extremely complicated, at least to us mortals who don't fully understand web server setup and permissions, and I would not dare to say there aren't exposures, especially if you don't set things up right and follow their recommendations.

Check out this thread, for instance, and follow the links and read about security and Gallery:

Only registered users can see links on this board! Get registered or login!

You'll be enlightened but also, if you are like me at all, confused and uncertain.

Posted: Fri Apr 20, 2007 12:14 pm

It looks pretty secure Smile

As long as the integration is secure as well, I suppose it should be alright.

I just installed it on a fresh copy of RN 2.10. The instructions for the integration say,

Quote:

If you are using a version of PHPNuke older than version 7.5, you must delete the following files from the integration package:
html/modules/gallery2/admin/case.php
html/modules/gallery2/admin/links.php

If you are using a version of PHPNuke equal to or newer than version 7.5, you must delete the following files from the integration package:
html/admin/case/case.gallery2.php
html/admin/links/links.gallery2.php

Since RN is based on 7.6, I deleted the /admin files as directed. Nothing shows up when you install the integration. No new module is visible, and no new admin module control is visible. So, do I attempt to use the /admin files?

Also of concern is that I would like to use a custom name for the module. Instead of "Gallery2" or "gallery2", I would like to use "Gallery" to make it fit in with the other phpnuke modules. The integration instructions say to change a couple lines in the /admin/case file, but since that file doesn't exist for me since I followed the instructions...

Well, when in doubt -- try it and see if it works Razz

I'll try using the admin files instead

Edit: That seemed to do the trick. I uploaded the /admin/ files (with the modification for module name) and it works. I left the /modules/Gallery/admin files intact. I'm not sure they need to be deleted, or if it matters at all. The gallery is working at least. Now to tap it...

Posted: Fri Apr 20, 2007 3:30 pm

I believe that the reason for the instructions on the admin files is that Burzi changed the location of admin files starting with 7.6. So Gallery (or the people who integrated it with Nuke) had to have them in two places and you choose based on the version of Nuke you are running. If you got Gallery working that easily I will be asking you for help in the near future Smile

... seriously, when it works it really works and when it goes crazy you go crazy with it.

Regular Joined: Sep 12, 2006 Posts: 58 Location: Dsm, IA

It should have shown up with the admin files from the /modules/gallery2/admin. If the name of the modules folder isn't "gallery2" then you have to move the files to whatever you named it. Then go into modules administration and the admin will show up (it doesn't autoload the modules anymore with RN2.10).

Involved Joined: Apr 22, 2006 Posts: 356

you can name the gallery anything you like. I named mine Pics, then when you activate it in the "modules" admin as stated above, you will see the link for it. Make sure you have installed it in the modules directory and have it up and running as a standalone first, then add the embedded files. Next after activating it, you will see the link and you will have to fill out a couple of things. Then you can import your current users.

If you have problems with the settings not sticking, you may need to drop that table from your nuke db and let it be recreated. You may want to use seprate db's for nuke and the gallery. Just a precaution I guess.

Posted: Mon Apr 23, 2007 6:35 am

I used the preinstaller and everything appears to have went fine. Is there a reason not to use this way over a standard installation? Less secure? I will remove it and install it the standard way if there is..... Confused

Posted: Mon Apr 23, 2007 12:14 pm

not sure what you mean by standard way. The instruction for embedding it into nuke are pretty clear as to how it has to be set up. Install it into the modules directory and ensure it all works. Then you can upload the files to embed it into the nuke structure. You will omit those two files as when you apply the configuration settings, that will do the same thing as what you would be changing in those two files.

Posted: Mon Apr 23, 2007 7:28 pm

when I installed it, I used the preinstaller method. You upload the preinstall.php to where you want the gallery2 to be installed and then just follow the onscreen instructions.

Curiosity is up now....I will have to go back and check to make sure this is ok for Nuke.... Confused