ceiroa / slurchin Goto Github PK

Currently, there is no access restriction to the 'images' folder.

One way to solve this - probably the easiest - would be to include
.htaccess and .htpasswd files in the folder, but Cherokee web server does
not recognizes them. 

If we had enough memory, we could give each image the name of the current
date-time, and pass this name to the function that displays the image. In
this way it would be almost impossible for somebody to guess the name of
the image. If memory is a problem, we could also delete any other image in
the folder programmatically to save storage.

Another way would be to save the images outside of the web root directory.
But the configuration of the server would need to be changed to letting the
application access those files (could not get it to work in Cherokee; the
images are saved outside of the web root, but they cannot be displayed in
the application).

The system only shows the first picture you take once you log in. After
taking, and showing, one picture, it doesn't show any other.