Geeklog Forums

Hi, I have restricted access to my gallery to logged in users. I've noticed that if I log into my geeklog site then log out I am still authorised to access my gallery. Is this a known issue? Any fix for it? R.

Gallery session cookies persist even after geeklog session cookies are destroyed (by logging out). This means that when accessing gallery after logging out of geeklog you will still have the same access to gallery as you had when you were logged in. I think (and I'm not sure about this) that closing your browser window will destroy these cookies. In any case it is a small security problem that really should be fixed. Hope this helps, Vinny

Closing your browser does indeed seem to clear the cookies. And yes it should be fixed ! :woot:

Doesn't <i>really</i> matter if you are the only one using your computer at home or at work. The glitch only appears on your computer and not to other users logging into and out of the site. The reason this happens is that Gallery sets its own cookies. When you log off of Geeklog, Gallery doesn't know it, so it keeps you logged in to Gallery. The problem should be fixed but the risk is minimal in most environments.

Can I ask a simpleton question? How did you restrict gallery to logged in users only? Thanks!

Get the latest integration release from http://gplugs.sf.net

I have the newest GL and Gallery, and still have this "Only Logs out of GeekLog, and not Gallery" problem... It's a little anoying when I have making changes as myself, then wanting to logout and see how anonymous would see the site. I am have to use 2 different browers for this kinda thing. I'm hoping for a fix... M@

There really is no fix for this. There are a couple of work-arounds: If you have two broswers, I'd suggest being logged in as Admin from one and anonymous from another. If this won't work for you, you can just delete all cookies from your domain after you logout. -Vinny

[code] Has anyone from this thread tried this "fix"??? http://www.geeklog.net/article.php?story=2002080419482031 Thanks, M@

You don't need to create a new $_CONF variable if there is a clash in cookie names between GL and another integrated package. All you have to do is change the cookie name in: $_CONF['cookie_password'] = 'password'; to something like this: $_CONF['cookie_password'] = 'gl_password'; or whatever other cookie has a conflict.

I just changed my $_CONF['cookie_password'] from "password" to "gl_password" and it still won't logout of the gallery when I logout... I think my next step is to try this... http://www.geeklog.net/article.php?story=2002080419482031 Has anyone tried these changes? M@

You can try it, but I'll tell you right now it won't fix the logout problem. That particular article with comments deal with cookie name collisions. In other words, the cookies from two different software applications have the exact same name. As someone pointed out to you already here, you don't need to create a new cookie to get around this. All you have to do is rename the coookie in one or the other so that they have different names. This helps to fix login not logout. I don't have Gallery installed, but apparently it uses its own set of cookies. To fix the logout problem, I think you either need to delete the corresponding Gallery session and/or set the Gallery cookies so that they expire at the time you logout of Geeklog. You can also further integrate the two so they're using the same cookies for logout and login but this might involve quite a bit of work.

So I did a search on "slideshow" to try to find out why may gallery slideshow sometimes is missing a few pictures from the end (still unsolved by the way) when I came across this little pearl of wisdom... worked for my site (so far)... M@ "I experienced the same problem but I managed to solve it by modifying the init.php under gallery directory as below. if (isset($_USER["username"])) {   $gallery->session->username = $_USER['username']; } else if (!empty($gallery->session->username)) {   $gallery->session->username = ""; } The first two lines are already there which is about line 200, I think. --- sagnaing;" -- http://www.geeklog.net/article.php?story=200210062008532

So I did a search on "slideshow" to try to find out why may gallery slideshow sometimes is missing a few pictures from the end (still unsolved by the way) when I came across this little pearl of wisdom... worked for my site (so far)... M@ "I experienced the same problem but I managed to solve it by modifying the init.php under gallery directory as below. if (isset($_USER["username"])) {   $gallery->session->username = $_USER['username']; } else if (!empty($gallery->session->username)) {   $gallery->session->username = ""; } The first two lines are already there which is about line 200, I think. --- sagnaing;" -- http://www.geeklog.net/article.php?story=200210062008532