SERIOUS PRIVACY ISSUE - Sharing one photo (or favorites) reveals entire gallery in URL
Currently when you hit "Share," the links contain the gallery ID of the photo. If you simply erase the photo ID, a visitor gets full access to the ENTIRE gallery. Even the direct photo links have the gallery ID. It doesn't take much to figure how to access the gallery. Same goes for sharing a favorites set. The full gallery is revealed when clicking 'back' or exiting the favs view.
I feel my clients would hesitate to share our photos with their friends if they knew it would reveal the entire gallery. Not every photo should be public. And if you don't inform clients of this fact, you could end up in hot water.
Zenfolio support suggested putting the sharable photos in a separate gallery. But how are we supposed to know what photos the client will want to share with others. They of course don't have the access to modify galleries!
This is a serious problem that needs a serious fix.
I strongly agree. . . I have clients that have favorite headshots they send to their managers (and this taks the client many hours to choose) - and in a few wrong clicks, their A-list manager ends up seeing the whole gallery and gets overwhelmed, frustrated, and then just picks one photo arbitrarily to get it over with. This upsets the client because they had already made the first cut. There's a trickle down effect that happens; this makes the photographer look incompetent which in turn makes Zenfolio look "broken" or incompetent. It's happened so many times I have been researching other platforms in order to showcase my clients photos and let them choose their favorites.
Basically they need to provide a link to the photo that does not include the gallery ID. the gallery ID should be scrambled and only work in combination with the photo ID, but not alone. the favorites set as well should not provide access to the full gallery. that's the suggestion/request.