image.php only works on uploads now

anyone using this for arbitrary thumb creation from another folder will
have issues