Photobucket disaster and recovering the images to a Chevereto website

[Rodolfo]

The thing will pop up an special uploader, where login and everything else will be handled for sure, you can enable it only for people logged in into Chevereto and so on. Eventually with SSO it will be all tied up

 

[june]

Sounds good. Consider me as your customer as soon as this is rolled out.
I have been checking forum and website regularly for this feature since past 3-4 months now

 

[Dan1]

My concerns exactly. To be clear, I need only forum members to be able to create an account on the Chevereto site, hopefully automatically with the forum registration. Chevereto has open or closed registration, and open means anyone can register not just forum members.

 

[Rodolfo]

Chevereto has open or closed registration, and open means anyone can register not just forum members.

There are always workarounds. For example, you can disable access from other websites so for everybody else it will be useless to host in your website.

 

[ashkir]

The thing will pop up an special uploader, where login and everything else will be handled for sure, you can enable it only for people logged in into Chevereto and so on. Eventually with SSO it will be all tied up

Perfect!

 

[Dan1]

Like most forums mine has to do with specific subject, and like most forums I want to encourage participation and picture sharing. A member is more likely to upload their pictures to a non-subject-specific image hosting site in the first place, so they can have all their pictures in one place, easier to remember. With my Chevereto site I'm promoting hosting only for pictures that have to do with my subject. It doesn't make sense for a member to have separate picture hosting accounts for every forum they participate in. At the least they should be able to use images that have to do with a specific subject across a few forums dealing with same subject. To allow hotlinking only from my domain will discourage uploading and participation.

 

[june]

you can disable access from other websites

I'd rather have my members "link" the accounts so they feel they it's exclusive to them and they can use it however they want.
That was I can keep my img hosting site clean from public's spam as well as keep it under resources and just like @Dan1 said, they don't need multiple accounts to host same type of content.

I would love to see if chereveto can come up with 'account assiciation' like external-accounts and give them permissions to upload on the chevereto side. I'm not sure how you will do it. I think as long as members don't have to make a new account and can share the same account as forum is the best we can have. We can always turn off registrations and public uploads in chevereto and if someone has an account on forum, they get an account on image hosting site own it's own.

Would also love to have a seperate addon if that's in the todo for xenforo to manage it by permissions on who can use the image uploader. Though the permission request is not required and is only optional

 

[ashkir]

I'd rather have my members "link" the accounts so they feel they it's exclusive to them and they can use it however they want.
That was I can keep my img hosting site clean from public's spam as well as keep it under resources and just like @Dan1 said, they don't need multiple accounts to host same type of content.

I would love to see if chereveto can come up with 'account assiciation' like external-accounts and give them permissions to upload on the chevereto side. I'm not sure how you will do it. I think as long as members don't have to make a new account and can share the same account as forum is the best we can have. We can always turn off registrations and public uploads in chevereto and if someone has an account on forum, they get an account on image hosting site own it's own.

Would also love to have a seperate addon if that's in the todo for xenforo to manage it by permissions on who can use the image uploader. Though the permission request is not required and is only optional

I would absolutely love to be able to upload images directly to Chevereto by using a forum button or via a browser extension and have it attach to my Chevereto account.

 

[Rodolfo]

That was I can keep my img hosting site clean from public's spam as well as keep it under resources and just like @Dan1 said, they don't need multiple accounts to host same type of content.

Still, you have to block other websites since nothing will stop your members from uploading images and share them on other websites.

I'm looking at the big picture here and what I'm seeing is that SSO is a cool addon, but actually block others is the real protection we are looking for. SSO will be added later on, not now because I want to roll this in next update and by adding more and more features the release will just get delayed.

Cheers,
Rodolfo.

 

[june]

nothing will stop your members from uploading images and share them on other websites

That is not an issue. All I want is that website (the account a.k.a ability to upload) should only be given to my forum's members. That is all.

So, if someone's not a member on my forum should not be able to have an account on my image hosting site either. And those who are already members of my forum should be able to access the image hosting site without having to make a new account.

If SSO will be delayed, then can the xenforo addon generate a 'secret code' which is unique to everyone on my forum that will be required to make an account on image hosting site?

Or can I have my members not make an account at all but use a dedicated uploader on a custom page for xenforo?
Just the upload form and not the whole site so my members can access it, upload it and get the image link?

On a second thought, that's not needed either. I'd just love to have the addon to upload image straight from new thread or post link.
Thanks for trying to push it by the next month 🙂

 

[Oakley]

Bridging two seperate pieces of software with SSO can be pretty problematic, all depends on how the forum software is setup. Some forums have adapted their code base in recent years to make this feasible but there's a few out there where I doubt it would be possible.

Initially I could see some sort of integration where forum images automatically get uploaded to Chevereto when someone posts them on a forum. That would be great if it's possible. However, if you wanted those images to go into someone's Chevereto account then I suspect that would be much more complicated.

Regarding blocking others, I'm looking to see if this is possible by using Referrer Checking with Amazon S3, Cloudfront, and AWS WAF:

https://aws.amazon.com/blogs/securi...s-waf-amazon-cloudfront-and-referer-checking/

Obviously you'd need to be using S3 and Cloudfront.

Have'nt tried it yet but will give it a go at some point 🙂

 

[Rodolfo]

Forum upload via plugin to Chevereto and then keep those images related to a given user is feasible only if both sessions are somehow linked, which SSO can do.

Those uploads will be at Chevereto, at their profile, not in their forum profile. To get that it gets complicated (if you want to do it properly).

You can suggest stuff related to this plugin, but you are missing timing here. I will add an universal plugin, that's all. There are other features pending and this one doesn't need all the extra stuff that is being mentioned in this topic.

I will keep it neat and simple for now.

 

[Dan1]

This is what I need:

1. Guest uploads to chevereto site - disabled.
2. Chevereto site accounts only for my forum members.
3. Ideally a forum account automatically gets a chevereto site account. I don't know if this is possible to implement.
4. The next best thing is the chevereto forum plugin to upload to chevereto site - for my logged in forum members only. And the images can be hotlinked from anywhere. With guest uploads to chevereto site - still disabled.
In this last case the members will not have a chevereto site account to manage their images. But at least the images are uploaded. Preferably to some designated album for all uploads without a chevereto site account, where they can be conveniently moderated.

Thanks for considering my suggestions.

 

[Rodolfo]

1. Guest uploads to chevereto site - disabled.

The plugin will load a button for everybody and it will ask for login if your Chevereto website has uploads disabled.

2. Chevereto site accounts only for my forum members.

Like I said, that won't be possible at this time. I'm sorry but it won't happen.

3. Ideally a forum account automatically gets a chevereto site account. I don't know if this is possible to implement.

At this time can be only achieved by coding your own custom API. I won't add that feature now.

4. The next best thing is the chevereto forum plugin to upload to chevereto site - for my logged in forum members only.

You should be able to conditionally call the plugin. That depends on your forum software, not Chevereto.

And the images can be hotlinked from anywhere. With guest uploads to chevereto site - still disabled.

Hotlink is enabled by default and guest uploads can be disabled at Dashboard > Settings > Image upload.

Cheers,
Rodolfo.

 

[june]

Like I said, that won't be possible at this time. I'm sorry but it won't happen.

that secret key or code idea be implemented?

or just one code which is universal which I will hand out to every member on the forum?

more like an invitation code that doesn't expire and can be changed?

 

[Rodolfo]

It will be a javascript file which you must load on the target website and it will load a button that when you click on it will open a pop-up with Chevereto uploader.

That's all.

At this time I don't care about extra stuff related to this feature. Let's see how it goes and then I will decide if is worth to keep adding features on this one.

 

[Dan1]

You should be able to conditionally call the plugin. That depends on your forum software, not Chevereto.

I'm assuming the button will load in the post editor just like the Postimage plugin, I can see no other place for it to be. The post editor is available to logged in members only, so this should be OK.

The plugin will load a button for everybody and it will ask for login if your Chevereto website has uploads disabled.

An important feature of this plugin should be easy to use uploads from the forum with guest uploading disabled for the actual chevereto site.

I have no intention of running a public image hosting site. I want to use this software as a compliment to my forum. If I can't do that effectively, then all I got is a way to store my personal images.

 

[Rodolfo]

Then we are running in circles, I've already told you that guest uploads will be disabled if you choose that setting, your users must have an account in your Chevereto based website to upload. If they don't have an account in your Chevereto based website then the system will ask for signup/login.

There won't be SSO here, there won't be any user login integration.

Cheers,
Rodolfo.

 

[june]

An important feature of this plugin should be easy to use uploads from the forum with guest uploading disabled

That's already a core feature.

The button will pop up a windows to upload. Since guests uploads are disabled in settings (not by default) forum members will have to signup on chevereto website once and until their cookies expire they will be able to upload images without signing in again

All that will be it for this update.

I hope that's exactly what @Rodolfo means to say.

 

[Dan1]

I'll wait to see this implemented to figure out if it's something forum member are likely to do.