Whoa. Unauthorised users -will- be able to upload stuff.

I can't afford that kind of insecurity. Looks like mucking around with this product for a few hours over the last month was a big mistake. No Firefox support, no CSS support, no reflowing support, abysmal security...