CrySyS Lab Security Advisory finds design flaws in secureURL.php. More information is available here.