Image Gallery software overview
- Overview
- Find an image gallery application for the Sao Tome group to use, allowing the locals on the island to document their photonarratives.
- Initial research
- Found seven possible options:
- Zenphoto (www.zenphoto.org)
- installed on OpenSUSE and Ubuntu (needed to install flash player for multiupload function), managed to get fully operational
- requires LAMP server & GUI MySQL administration tool
- rich feature set, including tagging, commenting, dynamic galleries
- had to edit css files to turn commenting features on
- issues with size and legibility of CAPTCHA on commenting form
- Camera Life (http://fdcl.sourceforge.net/index.php)
- installed successfully on Ubuntu but not OpenSUSE, with a bit of difficulty
- requires LAMP server & GUI MySQL administration tool
- not very feature-rich; meant more for personal than community use
- Gallery (http://gallery.menalto.com/features)
- did not try out
- Plogger (http://www.plogger.org/)
- did not try out
- phpGraphy (http://www.phpgraphy.org/)
- did not recommend, had lingered in v0.9 for well over a year with no updates
- phTagr (http://www.phtagr.org/)
- did not recommend, minimal documentation on website
- SPGM (http://spgm.sourceforge.net/)
- did not recommend, would have required downloading additional code plugins for full functionality
- Security considerations
- All packages were filled with security holes of varying severity.
- Most weren’t secured against malicious php code
- possible countermeasures:
- secure apacheĀ htaccess file against malicious .gif files:
- <Files images>
deny from all
</Files>
- possibly filter code through perl script, using perl’s “taint” mode (seeĀ http://gunther.web66.com/FAQS/taintmode.html for further info on taint mode)
- much more complex solution than likely possible for an intro-level class
- requires someone with high competency in both php and perl
- General thoughts
- Most software found was optimized for single-user or few-user environments, not the multi-user conditions of Flickr or other commercial image servers.
- Might be better served developing a Drupal-based gallery environment instead, using Drupal’s greater code security and flexibility.
- Higher learning curve with Drupal, lacks gallery software’s plug-n-play ease of use