Yes, it uses the DNN security, and I don't doubt the security at all.
1.
Imagine user1 uploads img1.jpg and post it in he's post.
Now user2 wants to upload an image, this image has the same name; img1.jpg
Now user2's image overwrites user1's image
I see a need for an unik image name rewrite script when images are uploaded
2.
Imagine we now have 500 users on the site.
Each user uploads 5 images, thats 5*500=2500 images in the folder.
Now you upload a new image, then you have to manually scroll through the 2501 image's to find the one you just uploaded, click on it, and then click ones more to get back to the Post/Reply page.
It is a good thing that everyone have access to the same images, so they only need to be uploaded once. But who want to scroll through 2501+ images???
Thats for Moderators and page developers, not the every day average user.
1 button, find file on PC, click upload and the img is automatically added to your post......even that simple an approach isactually hard for many people to do.
Now imagine if the same approach was used on a site like photobucket.com then there would be 5billion images to scroll through in that folder!
3.
It should make a thumbnail if size is greater than value given in control panel, the user should not be allowed to set the size.
it will totally destroy the page layout when large images are uploaded.
I wish I had programming experience, then I could have made something myself and contributed it to the dnn community, but I don't and I can't