Additionally, create an `.htaccess` file with the following content in your `albums` folder:
`order deny,allow
deny from all
allow from 127.0.0.1`
Because, if you don’t do, the images are still accessible by typing the full URL into the browser’s address bar (and thus bypassing zenphoto)
... or is this “bug†already fixed?