The official release of JomSocial 2.2.1 only protects the album folder contents by adding a 'index.html' file when album folder creation, instead of protecting the full folder structure. We know that are some good sniffers out there that can give a complete list of files inside a given folder path. There are some folders still unprotected.

SecureAlbum does the full job. So, it is our conviction to keep this plugin available for download until developers realize that protecting the full path makes harder for an attempt to access files.

 READ FULL ISSUE