Re: That reminds me..
All suggestions worthy of this site :).
I'm just changing the rights - the problem with feeding dodgy images means you have to host them first although it's always an idea to set up a marketing image instead (must check later if there is a way to point all the hotlinks to one image, though, I guess that may hide in the .htaccess features). Also, it's just a simple Piwigo box that I set up somewhere so it doesn't have much in the way of access control or logging, it's far too basic for that.
When I find time to spin up a Joomla site I'll add some sophistication and BOFH trapdoors, but for the moment this is good enough - thanks for the idea, though :)