Do you mean like someone takes the absolute URL to a pic on your server and uses on their site? I think you can configure the server such that the requests for certin filetype must have a refferal code or that user client must have a current session to get the fiel. Sortat like what Geocities and Tripod use to on their servers.