[Xitami] Security for image files for CGI app

[Stefan Pantazi]

Hi,

I would rather use a LRWP peer application to get (through a url like
http://yoursite.org/images?id=1234&thumb=true) both the full images and
their thumbnails without storing the thumbnails separately as static files.
You can store the image files outside the website scope, and let the LRWP
application authenticate subsequent requests by reading a random cookie that
was passed to the user after the initial authentication.
The LRWP peer is supposed to work faster than the CGI.

>I guess I could write a separate CGI app to stream each image
>on demand as part of the HREF, but that seems like an awful
>extra load to call a CGI for each image. Just hoped there might
>be a better solution.

I do not understand why do you have to write a separate CGI for each image.
Just identify them in the URL encoding.

I hope this helps.

Stefan