block swfupload.swf, timthumb.php

even secure swfupload seems to have issues better to just block it.

also added a code to block timthumb.php