3

I'm building a website for selling stock photography and I'm looking for a way to protect the images. Here's what I'm using right now:

  • Imagecache Actions to watermark photos
  • Private file system for uploading all images
  • The images are displayed on the front only through image styles with watermarking.

Question: is this enough and are there any ways users could bypass this (e.g. by directly trying to access certain image style)?

Thanks!

  • 1
    I assume you have other image styles, other than the ones you are watermarking? – mpdonadio Mar 8 '14 at 19:12
  • Yes, that is correct. However, I will not use any of the other styles to display these images. – Aram Boyajyan Mar 9 '14 at 9:08
3

This is probably not as secure as you would like it to be. Basically if a user has access to view the image they can view any derivative image (image style), so long as they can work out the url to that derivative.

There is a module image style access that allows you to set up access rules per image style.

That should give you the extra protection you need.

  • Thanks Rooby, I will check out the module now and keep this thread posted. – Aram Boyajyan Mar 9 '14 at 9:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.