Thanks for the info and the link, that is very helpful. The first thing to address is how you have the pages setup. Normally you would only want visitors to be able to see the results, then view the details.
The additional functionality of being able to manage the records by inserting, updating or deleting them should be reserved for admins or contributors of the site. This is normally done by having a back end set of pages for managing the information in the site. This back end should be password protected so that only allowed users can make edits.
You should create the front end pages like you have using DataAssist, but you should only create search, results, and details pages. The other pages should not be generated for the front end of the site.
You will need to create the full set of administrative pages and make sure that they are secured. You can handle the security with Security Assist. For the images part you should make use of Digital File Pro or the Universal Email 4. These tools have file upload functionality that you can use on your admin pages for inserting and updating the records. Once you have images for the records you can then update the front end pages to reference the image stored for each record.
There are a few parts to this as you can see so it would be best to do them in order making sure that you have the correct results along the way. If you have any questions about any part of this let me know, it is best to work things out one issue at a time.
