Ah, my bad. I was looking at the wrong "report". As I indicated when I was contacted about this issue, this is not a "bug". It has been this way since the very early versions of PhotoPost and we have never had a complaint about how it was implemented. That's not to say we can't change that (and we have), but that doesn't mean its a "security bug".
In misc.php at line 294, you can add the code in bold:
Code:
Content visible to verified customers only.