This is the official website of Gallery, the open source web based photo album organizer. Gallery gives you an intuitive way to blend photo management seamlessly into your own website whether you're running a small personal site or a large community site.


InMotion Hosting Contributes to Gallery

As part of their support of the open source community, InMotion Hosting, a professional web hosting service provider, rolled up their sleeves and worked with the Gallery team to help with some outstanding issues with Gallery 3.

InMotion developers learned the Gallery environment and worked on five different bug fixes, getting the new code to us via GitHub pull requests. They fixed things like a PHP 5.3.13 incompatibility, a parallel upload timeout problem and more. Their fixes will all be included in the next release of Gallery 3. In addition to the development work, InMotion has also provided monetary support for the Gallery project, which we appreciate!

Now that they’ve got the hang of it, InMotion is continuing its support of Gallery via ongoing technical contributions. Maybe you know of someone else who would like to contribute?

Gallery 3.0.4 Security Release Available!

After several extensive internal and external security audits which discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4 as a security release. All of the issues require that someone with malicious intent either have an account with edit permissions, or trick a user with edit permissions into clicking on a malicious link. In most cases, this can only lead to a possible XSS vulnerability, but in several instances it allows arbitrary PHP code execution.

We thank the following individuals for reporting these issues: Chalk, Mateusz Goik, James 'albino' Kettle, Emanuel Bronshtein, and Sergey Markov. Due to their efforts, they will each be receiving bounties of $1000 for their help in making Gallery more secure. Read our Bounties page for details and how to submit any security issues you find.

We strongly recommend that all users of Gallery 3 upgrade as soon as possible.

3rd Party iPhone App for Gallery

A team of developers has released a new version of their native iPhone/iPad app for Gallery 3.

viGallery allows you to manage your photos and albums straight from your iOS device.

Take a look on the app store: viGallery and on their info/support page.

It isn't open source and it does cost $4, but it looks like a nice way to work with Gallery 3 from your Apple devices. Read on for features and requirements.

Gallery interview on SourceForge's 'The Anvil' Podcast

A week or so ago, Chris Kelly (ckdake) was interviewed on's podcast 'The Anvil' about Gallery for the Blog. Check it out: The Anvil Podcast: Gallery.

Gallery 3.0.3 and Gallery 2.3.2 Security Releases are available!

We're releasing both Gallery 3.0.3 and Gallery 2.3.2 as security releases. Several researchers, working independently, discovered possible encryption-related vulnerabilities. Low-risk XSS vulnerabilities limited to the administration area were also reported. We thank the following individuals for reporting these issues: James 'albino' Kettle, George Argyros & Aggelos Kiayias, and Emanuel Bronshtein. They will be receiving bounties for these issues. Read our Bounties page for details and how to submit any security issues you find. The CVE id for these issues is CVE-2012-1113.

We recommend that all users of Gallery 2 and Gallery 3 upgrade as soon as possible.

Take a short survey on Gallery permissions

Researchers at Carnegie Mellon University are using Gallery to learn more about how people use access-control permissions in online photograph sharing systems.

If you would like to contribute, please take their survey which should take less than 5 minutes to complete.

Check out this forum topic for more details.