Avatar Uploading

Posted: Sun Feb 19, 2006 5:19 am

Has anyone else experienced a problem with not being able to upload avatars to your Profile?

All the permissions seem fine, gallery avatars work and browsing my machine for an avatar, and uploading seem to work fine with no error messages yet no avatar ever displays.

Any ideas?

Thanks.

BTW, thank Raven for your help in getting this distro installed, much appreciated!

Posted: Sun Feb 19, 2006 4:41 pm

Change chmod to 777 for modules/Forums/images/avatars/xy.gif

or define in your forums configuration such a path:

modules/Forums/images/avatars/userpic/xy.gif

registered · Posted: Sun Feb 19, 2006 10:09 pm

Just note that uploading is a security risk. If you really do not need this feature, you should keep it disabled

Posted: Mon Feb 20, 2006 3:11 am

I'm aware that avatar uploading is a risk but I would like my members to have as much account freedom as possible. Is it safer to allow remote avatars then?

BTW, thanks for the help folks, apparently I'm a bigger phpnub than I originally thought.

Posted: Mon Feb 20, 2006 7:29 am

I´m not the security expert but from phpBB security tracker I know cross site srcipting with IE in avatar upload was fixed in version 2.0.18.
If you use the search function you ´ll find several topics about this security risk:

http://www.ravenphpscripts.com/postt1876.html

Posted: Mon Feb 20, 2006 11:10 pm

Thanks again for the help.