hi,
im desperate in looking for a gallery solution
and right now zen is exactly what i want
i want to stick with it but i have one problem though

i tried password protecting an album, and then since i have the recent photo feature appear on the main page, the content of that password protected album also appears there. when you click on it, it takes me to the content of that album with full access to all the pictures.

it appears that its only the link of the album that is restricted. so if the image appears in recent photo/album and you click on it the album is still accesible

its true for me.
http://gallery.bartyfly.com/index.php

Your link does not display. So, a couple of questions:

First, are you using a standard theme or one you have created? If the latter you need to add a call if (checkForPassword() { } around the part of your image.php page that you do not want to display.

Also, for passwords to work correctly you need to be running the nightly build.

im sorry:
correction for the link: http://gallery.bratyfly.com/index.php

by the way its a theme that comes with the gallery, its from stopdesign

Seems password protected to me when I visit it.

Are you logged in as the gallery admin while testing? That may override password protection on individual albums.

no i wasn't login as admin. in fact i was using firefox to edit the gallery and view as guest using safari. its simpy not working. i had to switch back to gallery 2 while i still couldnt figure out how to protect the pictures.

hi sbilard, what you probably see was the gallery (another gallery cms)
do i still have to install the nightly build even though i have just downloaded the zenphoto 2 days ago? i presummed that the download link at maimn site gives the updated version.

thanks for you answers guys

If you downloaded the 1.1.3 version, that is not the same as the nightly build.

Gallery link: http://bratyfly.com/zengallery/
note: i dont own the pictures. use for testing purposes.

I did now and upload the nightly build. I made some test. Here are my observations. Hope this could help us improve future updates.

There is an album named BOO, boo is password protected.
There is an album named ANIMALS and its NOT password protected.

I uploaded a picture in ANIMALS and showed up in the recent images as expected.
I uploaded a picture in BOO and did not showed up in the recent images which is fine.

I accessed BOO using the password and copy the direct link of one of the picture (http://bratyfly.com/zengallery/index.php?album=boo&image=vote.jpg).
I cleared my cache, cookies etc.
I accessed again BOO and I was prompted again to enter the password but I DID NOT.
Then I paste the direct link of the picture from BOO in the addresbar and I was able to access the picture without being asked to enter the password. And the picture has 2 links beside it. The link on the left was the previous picture, the link on the right is the next picture. Which gives a full access to the gallery. And if you click to the name of the gallery above, that's the only time you will be asked to enter the password

Now what i'm worried is, if there is a certain pattern i named my pictures, one could guess what is the filename and try to access the album by simply typing the link below:

http://bratyfly.com/zengallery/index.php?album=boo&image=name.jpg -- name.jpg as the filename guessed.

Another scenario. If a certain guest sent the link of the image from a password protected album to someone via email, the recipient will just click on the link and they will be able to access the picture (and all pictures of the album via the next and previous links) without being prompted to enter the password.

What I actually expecting was if I try to access a certain link of a picture which is password protected, I should be prompted to enter the password of the album.

If this could be done, then showing up the images from a password protected gallery in the recent images is not a problem since the moment you click on it, you will be ask to enter the password.

Thanks and I hope i am not wasting your time.

Bratyfly

Of course you are not wasting our time. We appreaciate your feedback, especially on this sensible topic. Unfortunatly you are indeed right that you can access a image in an password protected album directly.

As for recent images: If you use the latest nightly build that should not show images from password protected albums anymore.