Photo Organizer

  • Status Closed
  • Percent Complete
  • Task Type Feature Request
  • Category Backend / Core
  • Assigned To
  • Operating System All
  • Severity Low
  • Priority Very Low
  • Reported Version Devel
  • Due in Version 2.31
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Photo Organizer
Opened by pizza - 2006-05-11
Last edited by pizza - 2006-06-08

FS#19 - Bulk import from filesystem

This one is a doozey, due to the security implications in a multiuser/shared environment. We may want to make the 'filesystem bulk import' path per-user or something like that, but it has to be readable by the webserver user.

Closed by  pizza
2006-06-15 15:37
Reason for closing:  Deferred
Additional comments about closing:  I'm closing this for now, I can't come up with any remotely-secure way of handling this, while still allowing users to specify their own upload paths.
pizza commented on 2006-06-07 18:23

The current implementation (in -devel) pops up a text box and expects the user to enter path. This is a glaring security hole, as any file readable by the webserver could potentially be imported.

Still, I'm inclined to port this to -stable, defaulting it to disabled, as the code that enables this is pretty simple.

pizza commented on 2006-06-08 12:40

It's backported to -stable now, defaulting to DISABLED.

I think I may only enable it for admin-level users?


Available keyboard shortcuts


Task Details

Task Editing