Justin, this is what my IT guy says as we host our own website.
Tell Justin this:
The server is a 2008 windows IIS 7. The PSP 5.2 is installed and the IIS anonymous user has full control of the C:\inetpub\wwwroot\PowerGallery100 directory. That directory is a virtual directory on the IIS server, with pass through rights. This setup works for the IssueTrak program. It allows the users to create in the directory to write issues.
By doing this, anyone can login and write to your directory.
Is there a lockdown feature to this program?