Do not let people set the url when uploading a new image--only accept a file