[CentOS] Web photo gallery options [Solved]

Scott Silva ssilva at sgvwater.com
Fri Jun 26 17:50:24 UTC 2009


on 6-26-2009 12:27 AM Sorin Srbu spake the following:
>> -----Original Message-----
>> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On
> Behalf
>> Of Les Mikesell
>> Sent: Thursday, June 25, 2009 5:55 PM
>> To: CentOS mailing list
>> Subject: Re: [CentOS] Web photo gallery options
>>
>>> Seems like I also did not mention it must be free, as in not costing
>>> anything. 8-)
>>>
>>> Though I dream of a six-disk NAS filled with 1TB-drives... 8-/
>> The point of these devices is that the cost ends up being negative
>> compared to running stuff on a full-featured computer powered up all the
>> time.  Plus, they integrate the media server, so upnp/DLNA clients like
>> the PS3/Xbox360 and an increasing number of network-connected TV's can
>> view the same pictures with their built in protocol without yet another
>> setup.
> 
> That might be interesting if you have all that flashy TV:s and stuff. My
> computer-based PVR, running WinXP works fine, as does my Xboxes.
> 
> Anyway, I installed Gallery2 yesterday evening and finished up way late. It
> works sort of. I feel I need to read up on security best-practices with
> regard to mysql and also how to deny folder listings. As it is now I think
> mysql is seriously insecure for world access, and the folder listing shows
> the gallery2 contents to the world. I'll look into it this weekend.
> 
> Thanks all who suggested and hinted me!
> 

If mysql and the gallery soft
ware are on the same server, then you don't need to open up mysql to the
world. The gallery software should be able to access the DB over the localhost
address, and you could firewall off outside access to mysql.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos/attachments/20090626/a8d29e6b/attachment.sig>


More information about the CentOS mailing list