3

I'm building a website for selling stock photography and I'm looking for a way to protect the images. Here's what I'm using right now:

  • Imagecache Actions to watermark photos
  • Private file system for uploading all images
  • The images are displayed on the front only through image styles with watermarking.

Question: is this enough and are there any ways users could bypass this (e.g. by directly trying to access certain image style)?

Thanks!

Improve this question
2
  • 1
    I assume you have other image styles, other than the ones you are watermarking?
    – mpdonadio ♦
    Mar 8, 2014 at 19:12
  • Yes, that is correct. However, I will not use any of the other styles to display these images.
    – Aram Boyajyan
    Mar 9, 2014 at 9:08

1 Answer 1

Reset to default
3

This is probably not as secure as you would like it to be. Basically if a user has access to view the image they can view any derivative image (image style), so long as they can work out the url to that derivative.

There is a module image style access that allows you to set up access rules per image style.

That should give you the extra protection you need.

Improve this answer
1
  • Thanks Rooby, I will check out the module now and keep this thread posted.
    – Aram Boyajyan
    Mar 9, 2014 at 9:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.