|
no you're not missing anything. This behavior is caused by some script kiddie who writes files in open folders. By default your pixelpost installation will have the thumbnails and images folders set to 777 which basically means that everyone can write to them.
|