This post is a sequel to Keeping things private and will explain how to secure images so that only authenticated users can see them. This is relevant when you want to publish private album on the web. All image files in the web application are viewable by default, you can right-click any image to see information about it in the properties, you can load image into browser directly (just type in http://rtur.net/blog/pics/rssbutton.gif for example), you can download any image by saving it to the local drive etc. Obviously, with private albums you don’t want this kind of behavior. More...