A little security tip: http://thingsand.me/media/images/image_228.html http://thingsand.me/media/images/image_228.html Your uploader is blindly trusting the f

A little security tip: http://thingsand.me/media/images/image_228.html http://thingsand.me/media/images/image_228.html Your uploader is blindly trusting the file extension for an image being uploaded. It's possible to upload valid images that contain HTML or other content within them. Deletions are also done via a GET request, which makes them vulnerable to a CSRF attack. An attacker can figure out the URL for a deletion based on the content of the post: once they've done that, all they have to do is trick the user into visiting a site controlled by the attacker.