I see. That's terrible... I mean, I also were doing it that way so the system would let only valid users access the images.
Do you know if there's another way to do so in file systems?, because if someone who is not a registered user knows the path and name to the images, he/she could download them, right?
Someone told me one that there was a module you could add to control access to folders (mod_auth_mysql, i think) but it works only on Linux, and I have to work in a Win2003 server.
Thanks...