Hi Mopnkeyman,
Happy new year!
Regarind the problem, please make a file called .htaccess in the uploads folder
It's content should be:
deny from all
Are you using the default folder or not?
I will check on the installation package this evening and issue update if necessery. I will also make sure when the folder is changed, a new .htaccess file is created.
Thanks for you valuable comment on this!