Software update: Gallery 2.2

The developers behind Gallery have released ‘double double’, or version 2.2 of their program. Gallery is an advanced program written in PHP that can be used to create online photo albums. For example, unlike JAlbum, the photos are stored in a database and a web server is needed to run the whole thing. Others features are for example the Photo Management option which can, among other things, automatically create thumbnails, rotate and resize photos, it is possible to assign read and/or write permissions to the albums and there are numerous modules to further expand the possibilities or the appearance to adjust. Among the many changes in this release are the ability to download and install plugins from the administration screen, security has been tightened, several watermark improvements have been made, and dynamic photo albums can now be used. are worked. The full release notes are as follows:

Highlight of changes in Gallery 2.2:

• Downloadable Plugins. This feature allows you to download and install Modules and Themes directly via the Site Admin interface. You can select from different sets of plugins (officially released plugins, experimental plugins under development and plugins provided by the Gallery community). This makes it very easy to stay up to date with the latest changes.
• Added support for themes to display dynamic albums.
  • New Keyword Album module makes use of this feature to show albums based on a search of item keywords.
  • New Dynamic Albums module shows albums of newest, most viewed or even random items.
• Ratings module has a new view to display highly rated items from across the Gallery.
• Security fixes and improvements
  There are no known exploits for these issues. All of them were discovered during a private, internal security audit. However, we highly recommend that you upgrade to Gallery 2.2 to secure your Gallery installation.
  • Added protection from brute force attacks on setup and account passwords.
  • Added protection from “Cross Site Request Forgery” attacks.
  • Added protection from “Cross Site Scripting” through item titles, summaries and description (only applies to the non-default HTML markup). This has been fixed for comments in Gallery 2.1 already.
  • Added protection from “HTTP Response Splitting” attacks.
  • Fixed information disclosure through application errors.
  • Hardened Session Handling in upgrade, install and support area.
• Watermark changes
  • Edit Album now has a Watermark tab where watermarks may be added or removed from an entire album, optionally including subalbums too.
  • Edit Watermark now has an option to replace a watermark image and apply the new image everywhere the old was one used.
  • New option to always use a single watermark and give users no watermarking options. Only Site Admins can change/remove existing watermarks.
  • New option to turn off the ability for users to upload their own watermark images.
• New themes:
  • Carbon
  • Ajaxian
• New WebDAV module to mount Gallery as network device on your computer. This allows you to easily manage your Gallery with any WebDAV client like Windows Explorer.
• New module to send Ecards.
• New Digibug module for prints from digibug.com.
• Added support for Flash Video and Windows ASF video.
• Added support for mp3 audio using a Flash based player.
• Added support for HTTP authentication through the new httpauth module.
• Photo auto-rotation based on camera sensors or on settings from other applications.
• Automatically detect dimensions of Flash animations and video.
• Option in MIME module to restrict file types that may be uploaded.
• Image Block changes
  • Now displays any item with a thumbnail (movie, flash, etc) in addition to photos.
  • A new block setting allows showing multiple images or albums.
• Added some user contributed image frames and icon packs including the Silk Icon set by Mark James.
• You can now add color to item title, description, comments, etc. Click on the “color” button and choose from a handy popup; or just use [color=red] bb code syntax.
• Comment-module improvements:
  • New block for adding comments directly from an item page.
  • Guests can now leave their name.
• Added support in Link Items module to make thumbnails for URL links using webpage snapshots generated by an external program like khtml2png. Also, the arrow watermark on thumbnails is now optional.
• Added RSS functionality: Comments for this album and its subalbums.
• Added Quotas Block: This allows the site administrator to display a block in the theme that displays the current and total usage of any user that has a quota assigned.
• Added an option to lock a user account to the current account settings. Useful if one wants to use a single user account for a group of users.
• Newly created albums from User Albums module now properly inherit permissions from the parent album, for settings like comments, ratings, etc.
• Moved some functionality out of core and into optional modules: Add items module for adding from local server or other web pages, and Replica module for creating item copies sharing the same original data file.
• Option in EXIF/IPTC module to set title for new items from IPTC/ObjectName.
• Improved usability in administration interface for installing modules and themes.
• New Multiroot module assists in creating alternate guest views of a single Gallery.
• Added exactSize and link parameters for image block.
• Resize dimensions now accept percentages of full size in addition to pixel size.
• Added support for PHP mysqli extension (newer version of mysql interface).
• Support for MSSQL database.
• Minimum PHP version now 4.3.0.
• Microsoft IIS doesn’t work with PHP-CGI due to a PHP/IIS bug. Microsoft recommends FastCGI instead and doesn’t support PHP-CGI. Please use ISAPI PHP or FastCGI with IIS instead. Users of Apache on Windows can still use PHP-CGI (and mod_php or FastCGI).

[break]