Add image to posts

I have some security concerns with this controller