If it was asking for a password just for viewing the image... Sounds like it means it's running Javascript through an image link. Isn't that a pretty big security hole?
1.Have an image link that runs javascript to add your session ID to posts
2.Hijack the session
3.???
4 Profit!
Comment