Password circumvention by directly accessing 'galleries' URI

[hb9eue]

Hi

I just installed novagallery. Thank you for that nice and easy to use gallery.

I have some galleries I rather don't want to make accessible publicly, unfortunately it is not yet possible to set access control to single galleries. So I set the password hash for the entire gallery.

That does not prevent anyone who guesses the /galleries/ URI to still browse and access the images and even the cached thumbnails.

Adding:

Options all -Indexes

to the main .htaccess mitigates the issue.

-Benoît-