Safest Photo Gallery

New Member Joined: Dec 04, 2005 Posts: 12

I'm looking for a photo gallery for my site.

Would it be safer to install a gallery in it's own
directory instead of as a module?

It's only for me to post my own band pictures.

Thanks,

Bayoujack
RavensScripts

Posted: Wed May 03, 2006 3:48 pm

Take a look at Gallery 2. They recommend that you install the Albums directory outside your web root and they have a bunch of security recommendations and tests. I've seen postings where they have conducted formal security reviews. I've been running the Gallery 1.4 and 1.5 for over a year with no breaches. None of this proves that it can't be hacked, actually that is impossible to prove. You do need to follow their instructions and, for instance chmod you config.php (the Gallery one) back down after installation.

On the other hand if you are going to go to the effort and overhead of installing Gallery then I hope you have a BUNCH of band pictures. It is not a light weight product.

The integration module (downloaded and installed separately) is pretty cool in that you can export your nuke users to Gallery and use them within it to assign permissions to albums. I don't know that Gallery would be any safer non-integrated.