2 ms·No. The timthumb.php script can be accessed directly by unauthenticated users.by nbpoole 15y agoNo. The timthumb.php script can be accessed directly by unauthenticated users.