For years, schools have posted photos of their pupils online. But could they be misused?