hi marckd.

Don't call cracker == "script kiddie" as "Hacker" please.
Hacker is a honorific title.

And my module is named myAlbum-P instead of "myAlbum".

Quote:sigh...

Quote:You should know, a cracker can make files as he like via some vulnerable codes.
The feature of uploading is unrelated.

And, myAlbum-P always put uploaded files (number).(ext) like 1.jpg

You should check all modules you use.

In fact, There are too many vulnerable modules in xoops.org