[Xitami] Security for image files for CGI app

[Paul Reid]

>  product thumbnails and full-size images.

So what if strangers can see the images?

Another approach is to link the image tag to a CGI app that delivers
the actual image, if it wants to. Typically you have one such app
and pass the filename (possibly path-less or obfuscated) on the
command line after a "?" in the URL. The CGI tries to figure if the
person is known and actually shopping before it delivers the image.

 -PRR