You should definitely limit the sizes that can be generated otherwise with URLs like http://host/WIDTH/HEIGHT/MODE/path/to/image it's pretty easy to mildly DDOS you.