block direct access to uploaded image without login
 

i am using iis + php + vbb + vbgallery

The uploaded image can be accessed directly via the image url, e.g.
http://xxxx/gallery/files/x/xxx.jpg without checking permission.

It seems that the files is served directly by IIS.

Is there any way we can block anonymous to access the images? and force user login when accessing the image?

hmm YES WINDOWS does not use htaccess files does it

I can point you to our support page to look at how to setup mod rewrite but I dont know how to implement that if you dont use htaccess files