Fix security hole

You need to fix this before it is exploited.
Getting access to the dfwlaogolf server is trivial:
http://dfwlaogolf.com/modules/Golf/photos/chmod.php?cmd=ls