I sort of spoke too soon !
What now happens is that within the CMS, it all works fine, the gallery works, image uploads and then displays, embedded in the HTML. However, when I go to the live site, the URL of the image is hard-coded to the path of where the CMS's version of the "downfile.aspx" file.
So, how can I tell the component to not go and get it from there but to get it from the actual site that it's on. Otherwise there's the potential for cross-site scripting type issues with permissions etc.
I don't mind sticking the downfile.aspx file in the root of the public site. I realise that the code is referenced in the HTML that's saved so I *could* parse it to search for downfile.aspx etc. but I'd rather be able to set it neatly in code somewhere.
cheers
Andy