The Drupal (CMS) uses .HTACCESS files to control directory access (unless of course you override/remove them and control your settings with modification to your PHP.INI file). On first install of this site I noticed that uploaded images were not visible in the default installation. The way around this is to use the following piece of .htaccess script in the folder where the images are kept on the server. So upload the following script to the offending folder and the images should become visible. SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006 Options None