Forum OpenACS Q&A: Response to how to avoid per-image queries while maintaining security

ad_page_contract in ACS4 has a filter 'verify'. It allows you to sign for example photo_id as you export it on the page that lists all the photos. You can then check within photo.tcl that serves the photos whether the photo_id has been altered.

Maybe you could port that feature.

ad_page_contract