Security Issue - Server Asset Folder
Are you aware that direct unsecure access can be made to the server asset area using the following URL (cms is the PowerCMS folder), you don't need a username or password to gain access.
index.php?lang=default&kfm_caller_type=fck&type=Image
Anyone else concerned about this?