[Xitami] Security for image files for CGI app

[Jeff Hamblin]

I'm developing a CGI web server application
that accepts customer orders of customized
items -- basically a fulfillment inventory system.
I authenticate users against a database.

All the webpages are generated from templates
stored outside the website scope, so they are
secure.

One aspect is the display of product thumbnails
and full-size images. Since the client's browser
needs to pull these from the server, they have to
be in the scope of Xitami's website -- rather than the CGI
application -- which makes them accessible via
a direct URL to anyone.

If I protect the product image directory with
Xitami's security then that will require the
user to enter a separate password for the
HTTP/1.0 Basic Authentication protocol, and I
don't want that.

Any suggestions?


-Jeff