Welcome to Inkbunny...
Allowed ratings
To view member-only content, create an account. ( Hide )
Inkbunny

Hidden and Friends-only files protected

We just made some changes to ensure that direct image source URLs will be blocked if the file is "Hidden" or set "Friends-only", unless the user viewing the file has logged in to Inkbunny and is allowed access to that file.

Previously, the Hidden and Friends-only conditions would only hide the submission page, but people could still access the direct image source URL if they knew it (such as if the image source URL was posted on another site or shared by someone else who had access).

The point isn't to prevent files from getting out there (people with private access could still save the file and repost it elsewhere) but it just means the site is now controlling access to your private files the way you would expect, not just hiding the submission page.

This is a major change to how file URLs are handled, so please let us know right away if you notice any bugs such as features suddenly not working right or thumbnails/images not showing properly.

Thanks!

IB
Viewed: 165 times
Added: 8 years, 2 months ago
Site News Item: yes
 
RealZero
8 years, 2 months ago
Haven't tested it myself so far, but this is certainly a great improvement and feature.
Not that I'd use it personally, but it certainly is an issue on about most art gallery sites and it's great to see you taking care of it.

Great work, gonna do some tests later and report if anything seems not to be working.^^

Greetings,
RealZero
starling
8 years, 2 months ago
Testing would be helpful, thank you! Apache now runs a few database checks any time a URL with "private_files" or "private_thumbnails" paths is requested. So we're not checking every file for access permissions, just ones that the system knows should be in the protected files folders. Seems to work in basic testing anyway, and only increases private file request times by 1 - 3 ms.
starling
8 years, 2 months ago
Oh, I should also note that for testing.. make sure the file is not available in the "public" path any more if it has been set private.

So for example (not real files!):

https://inkbunny.net/private_files/screen/125/125487_st... should be accessible and
https://inkbunny.net/files/screen/125/125487_starling_s... should no longer work as a URL once the file has been set private.

Also, files start out private when you first post a new submission (because all submissions start out "Hidden").
RealZero
8 years, 2 months ago
Yeah, I've discovered that.^^

So, so far all testing seems to work fine, even when switching back and forth between "friends only" and "public", the link in the friend's "favourites" and the corresponding "max preview" on the submission works immediately and without error it seems. Great job, I expected that to be a thing to cause problems or in general be a bit slow, but so far there really is no significant change in speed or anything.

I'm personally glad to see you DO NOT use the same thing for "hide from guests", as I usually use the direct URL to link non-users among my friends to show them IB files, so, I'm personally happy it's not applied there, but still telling you in case you actually WANT to apply it with that, as well. (which I hope you won't^^).

I'll see if I can find other things to check out, but so far I checked everything that I considered subject to contain flaws, even remote uploading from imagehosts, and so far everything is working as intended. (asides the favourite number still not being click-able to show who has fav'ed a submission, but that's another topic^^). So I guess you did another great job here.
I'll let you know if I stumble over any bugs or glitches.^^

Greetings,
RealZero
starling
8 years, 2 months ago
Yeah guest-blocked image URLs are still technically public. Someone could just create an account to see them anyway so there's not much point wasting CPU/disk time checking the user's permissions for those if a guest somehow gets the image source and accesses it directly.
Gedrean
8 years, 2 months ago
NICE :)  Inkbunny moving up in the world, and getting to be a better site day by day.

And new features added like... what, weekly?  <3
dmfalk
8 years, 2 months ago
Ah, I see you did figure it out! Great! :) As usual, heads-&-shoulders above the-site-we-won't-mention-that-keeps-promising-features-and-seldom-delivers. ;)

*tosses a cookie to the admin* :)

d.m.f.
LupineAssassin
8 years, 2 months ago
Kudos to Inkbunny for always thinking ahead. ^^ Happy Easter. :)
Beachfox
8 years, 2 months ago
The speed you find and nix problems like this, without disabling the feature that causes them, continues to wow me. As well as your transparency with the process.
Buck
8 years, 2 months ago
I dunno if it's related, but when I go to listen to a submission I posted as friends only, weird things happen.

First, the file doesn't load. I've checked, however, and other friends CAN view the file.
Second, InkBunny stops responding. I can no longer browse InkBunny, or the pages begin to load very slowly. I can't change the settings of the file, but if I wait a while, I can browse back to the frontpage.
Third, once I get off of the submission page, things seem to run smoothly again.
Fourth, if I DON'T get off of the submission page, and simply close the window and reload, InkBunny does not respond. I have to wait about 5 minutes before I can access InkBunny again.

All of my other songs seem to load fine, and like I said, my friends CAN access the file I uploaded. But I cannot.

Here is a video of my problem.

http://huskyindenial.com/share/friendsonlyproblem.mov
Buck
8 years, 2 months ago
also posted as a support ticket. probably more appropriate :3
Inkbunny
8 years, 1 month ago
This should be fixed now! Just posting this comment in case anyone reads it later. :P
Sefeiren
8 years, 2 months ago
You guys.... constantly amaze me. Seriously. You're all awesome. Thank you for this!!
New Comment:
Move reply box to top
Log in or create an account to comment.