Now, I copied "app/routes/route.json.php" file to app/routes/overrides/route.json.php
After edit "app/routes/overrides/route.json.php" and add "// Upload to website" before "$_REQUEST['privacy'] = 'private';" code.
saved and exit edit tool.
tried new upload on site and api.
unfortunatelly same. I see user and guest homepage last uploaded image.
That only works for albums and albums are only for registered users. So either you deny guest uploads or you inject all the uploads to a given user (not recommended).
The first param is the $source, second param is the $user_array and the third are additional params. In your case you need something like this for route.api.php:
Code:
$uploaded_id = CHV\Image::uploadToWebsite($source, ['id' => '<target user id goes here>'], ['privacy' => 'private']);