FYI, we were notified of a vulnerability today with RokDownloads. We tested and confirmed that it was in fact a security vulnerability that could allow a "Local File Inclusion" from the filesystem. This exploit has been addressed in the 1.0 release that we've now made available for immediate download.