Thread:Project:Support desk/File Access Security Gap/reply (4)

You can serve images only to logged in users. See Manual:Image Authorization