<HTML>
<HEAD>
<TITLE>Re: Application Design and Photos</TITLE>
</HEAD>
<BODY>
<FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'>You might also want to have a look at FSPhoto, which also stores the photos on the file system so any web server (like Apache) can serve these images. FSPhoto automatically generates the right links for the photos. <BR>
<a href="http://zope.org/Members/fafhrd/News_Item.2004-07-28.2010/">http://zope.org/Members/fafhrd/News_Item.2004-07-28.2010/</a><BR>
<BR>
Another one to have a look at is ZPhotoSlides - <a href="http://www.zphotoslides.org/">http://www.zphotoslides.org/</a><BR>
<BR>
Nate<BR>
<BR>
in article 000001c4c331$13ca85f0$64a8a8c0@gregor, Gregor Melhorn at g.melhorn@web.de wrote on 11/5/04 7:15 AM:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>Hello zope-users,<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>thank you very much for your suggestions!<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>I thought about it for a while, and the following solution came to my mind </SPAN></FONT><SPAN STYLE='font-size:13.0px'><FONT FACE="Wingdings">J<BR>
</FONT></SPAN></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>First: Speed is critical to the site, since there may be several thousand users online at the same time. <BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>What about using the extImage Product, letting apache serve the content from an external image repository? So Zope only serves image urls. This should be way faster than letting serve Zope the images all by itself. For security, I thought of creating a separate directory for each user containing the user’s photos. Directorys are configured to not be listable by anonymous users via apache. Every filename is a random string with at least 30 characters, so guessing the files should be impossible. <BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>For added security: I don’t know if there is some kind of apache rule that allows locking out ips that tried to guess files, therefore generating a lot of 404s. <BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>Security could further be improved by checking the referrer in the rewrite rule, which is used by extImage. Also it would be possible to set a cookie at the gallery page, and checking the cookie in a rewrite rule. This would prevent authenticated users from linking directly to the images (and therefore allowing unauthorized access). Not 100% secure, but should be difficult for everyone that doesn’t know how to fake a cookie and modify his referrer = the average user).<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>What do you think about that solution?<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>Thanks for your help!!!<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
</SPAN></FONT><FONT SIZE="4"><FONT FACE="Arial"><SPAN STYLE='font-size:13.0px'>Gregor<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'><BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><FONT SIZE="4"><FONT FACE="Courier New"><SPAN STYLE='font-size:14.0px'>_______________________________________________<BR>
Zope maillist - Zope@zope.org<BR>
<a href="http://mail.zope.org/mailman/listinfo/zope">http://mail.zope.org/mailman/listinfo/zope</a><BR>
** No cross posts or HTML encoding! **<BR>
(Related lists - <BR>
<a href="http://mail.zope.org/mailman/listinfo/zope-announce">http://mail.zope.org/mailman/listinfo/zope-announce</a><BR>
<a href="http://mail.zope.org/mailman/listinfo/zope-dev">http://mail.zope.org/mailman/listinfo/zope-dev</a> )<BR>
</SPAN></FONT></FONT></BLOCKQUOTE><FONT SIZE="4"><FONT FACE="Courier New"><SPAN STYLE='font-size:14.0px'><BR>
<BR>
</SPAN></FONT></FONT><FONT FACE="Lucida Grande, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'>-- <BR>
Nate Aune - natea@jazkarta.com<BR>
Plone4Artists - <a href="http://plone4artists.org">http://plone4artists.org</a><BR>
"Build your own artist community website!"<BR>
</SPAN></FONT>
</BODY>
</HTML>