Nice work ... what about privacy tough?
If I am not mistaken, the album id is 6 chars long with the combination of lower and uppercase a-z and digits, can be brute forced...
Yes, that's true. It's not particularly secure. I don't think many people are going to try and gain brute force to a random photo album, especially considering 80% are blank with people just trying out the site..
