• About
• Features
• Tech Specs
• Demo Website
• Requirements
• Get Web Hosting
• Get Design Services

• Further Info
• About Pixaria
• Privacy

• Feeds
• Pixaria News
• Documentation
• Twitter

Showcase Your Business on Pixaria.com

I'm on the lookout for about five Pixaria users' sites to refresh the showcase area of Pixaria.com. If you're using Pixaria in your business and would like to be featured, why not take this opportunity for a bit of free promotion.

In order to be featured, your website needs to be fully operational and should be designed and implemented to a high standard. It's also important that your site shows off the best of what can be done using Pixaria so customisation is a big plus!

If you're not using Pixaria on a public website, you can still be featured provided you're willing to provide some examples of the types of photographs you're using and a little information about your business.

If you're interested in taking part, please e-mail me with details of your site and I will get back to you once I've had a chance to check it out.

Security Patch Updated

Some users (mainly those running Pixaria Gallery on Windows servers) have reported problems with the security patch issued in response to a recent published remote file discovery exploit. For anyone who applied the patch and is having problems with large images not displaying, the file has been updated to fix the issue and can be downloaded here.

For any issues related to the patch, please email me at info@pixaria.com rather than posting in the forums as I check my e-mails far more regularly than the forum.

Pixaria 2.7 Has Landed

I'm very pleased to report that Pixaria Gallery version 2.7 is finally here, bringing new features and massive improvements to the gallery and image management tools.

The major new front-end feature in this release is support for Cooliris thanks to new media RSS support for galleries. This much requested addition is fully configurable and enables Pixaria to integrate seamlessley with the Cooliris browser plug-in using feed auto-detection. This also provides gallery level RSS feeds for all major browsers and RSS readers including Internet Explorer, Firefox and Safari.

New Gallery and Image Management

Cooliris aside, the most important changes to Pixaria in version 2.7 are in the admin controls, in particular the tools for uploading and importing images and for managing galleries. I've had a huge amount of correspondence about these aspects of Pixaria over the last few months and years and it's exciting to be able to finally introduce a public beta of new and much improved admin tools.

The main changes that will be immediately apparent in the admin area are that the upload and import controls now share a similar user interface that eliminates the tedious, multi-step process of earlier versions. The new tools are also designed with speed in mind and include integrated panels for adding images to galleries and setting metadata on files. The import forms also remember all your settings and configuration options between login sessions on a user by user basis which makes it easier to quickly import images using frequently used settings.

For anyone who's not quite ready to jump in and use the new tools, the old import and upload functions will remain available for the next couple of releases.

Wildcard Keywords

This release also includes a unique new feature which allows administrators to add wildcard keywords to images. This means that in the same way as an asterisk can be used in a keyword in the search form to match variations on a word, wildcard keywords allow you to specify keywords for images that can return search results from different search terms. For example, an image with the wildcard keyword 4.*.*5|2.*3 will return matches on any of the following search terms: 4115, 4785, 203, 293 etc.

Details of all the new additions and changes in this release can be found in the release notes and a full list of all the changed files is available in the change log. This update also includes the recent patch for a remote file disclosure security vulnerability.

All registered users of Pixaria can obtain the update free of charge by e-mailing info@pixaria.com.

Pixaria Security Vulnerability

This is an important message about a remote file disclosure exploit which has been discovered in Pixaria Gallery versions 2.0.0 and above. Earlier versions may also be affected and an update will be posted here when this has been confirmed or disproved.

All users of Pixaria 2.0.0 and above are advised to apply the patched file pixaria.image.php immediately to prevent the disclosure of sensitive information from your server to malicious third parties.

Anyone experiencing any issues after applying the patch should contact info@pixaria.com for further assistance.

Further Information

The security exploit in question allows a malicious user to download any file accessible to PHP from a vulnerable Pixaria website. This could include files containing passwords or configuration information such as pixaria.config.php or /etc/passwd. This puts the vulnerability into the high risk category and therefore installation of the patch is recommended without exception.

The patch itself addresses the vulnerability by checking for valid file paths in user submitted data and exiting the script without action in the event of an intrusion attempt.

Further details can be found here: http://www.securityfocus.com/bid/35802