I just found out that you can use FlashGet to download images that otherwise you wouldn't be able to view, just by taking out the "tn_" from the thumbnail link. Is there a way to protect against that?

Not sure personally but Brandon is one for surprising me.

Fill out a bug report here: http://forums.invisionpower.com/index.php?...mp;product_id=3

It'll get quicker response there.

You'd basically have to store your files outside of the web-directory and change the setting in the ACP. Otherwise, if the program can find the image via a regular weblink without going through the script, there's not much that can be done to stop it. There is hotlinking protection, but if the referrer is set correctly and such it won't do anything.

Thanks, that seems to fix that problem, you can't get the direct link.

I had another question though, when you click on image and save it, it names it weird, shows the name of the file like gallery_1_255_23452346.jpg but in front it has the location of the file in front, it goes like "-home-user-gallery-1133463-gallery_1_255_23452346.jpg", any way to make it so it automatically puts the caption name instead of that whole line?

I've had this reported once or twice. THAT sounds like a bug. Does it do it in both IE and Firefox?

In IE it comes up as "index.jpg", firefox comes up with that string.
On a MAC in both safari and firefox it comes up with the whole string

Is there any way to make it so it comes up by default with the Caption or Title of the picture as save name?

Well, yes, there IS a way - and it SHOULD be doing that. That's why I said it sounds like a bug to me.

what should I do now? should I submit it as a bug?