| users can access images directly but shouldn't be able to
I just noticed today that if i change "gallery/files/1/picture_thumb.jpg" to "gallery/files/1/picture.jpg" I can access the full size image. I have my permissions set up properly and the .htaccess setting set to ON. How can i prevent a user from accessing the image this way without moving all my files into the database?
thanks
eric
|