User banned for selecting Avatar from my site.

Worker Joined: Jan 17, 2007 Posts: 170

I got a email today that one of my users got in trouble with NukeSentinel for trying to choose I avatar I think... this is the reason I got via email (several of them):

Do anyone know why?

Reason: Abuse-Script
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Query String: burntclan.swisshut.com/modules.php?name=Your_Account&op=avatarsave&category=gallery&avatar=avatar (1602).gif
Get String: burntclan.swisshut.com/modules.php?name=Your_Account&op=avatarsave&category=gallery&avatar=avatar (1602).gif
Post String: burntclan.swisshut.com/modules.php
Forwarded For: none
Client IP: none
Remote Address: 59.101.12.11
Remote Port: 1359
Request Method: GET
--------------------
Who-Is for IP
59.101.12.11

Sells PC To Pay For Divorce Joined: Posts: 5661

huh...thats weird...
how come.....looking at your avatars ....avatar (1602).gif doesnt excist , nor does avatar 1602.gif

maybe because of the ( ) , cause when i used that i got banned,but not realy...
i could visit the site after that..

Posted: Sat Feb 03, 2007 8:17 am

Yeah I got another email... I'm guessing this was you? Confused

Date & Time: 2007-02-03 11:29:52 UTC GMT +0000
Blocked IP: 24.132.19.246
User ID: Anonymous (1)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.9) Gecko/20061206 Firefox/1.5.0.9
Query String: burntclan.swisshut.com/modules.php?name=Your_Account&op=avatarsave&category=gallery&avatar=avatar(1602).gif
Get String: burntclan.swisshut.com/modules.php?name=Your_Account&op=avatarsave&category=gallery&avatar=avatar(1602).gif
Post String: burntclan.swisshut.com/modules.php
Forwarded For: none
Client IP: none
Remote Address: 24.132.19.246
Remote Port: 33155
Request Method: GET
--------------------
Who-Is for IP
24.132.19.246

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

Posted: Sat Feb 03, 2007 8:19 am

yes,thats me when i tried same address.
but your not banned..
so what about the avatar ?

Posted: Sat Feb 03, 2007 8:24 am

yeah weird... there are no ip's showing up in the banned ip's section.

looks like you tried to load that address just as anonymous user?

Posted: Sat Feb 03, 2007 8:28 am

yes,because the url is avatarsave i couldnt do that....
so thats why anonymous,im no member or logged in...

but let me ask for the third time...
does that avatar excist ?

Posted: Sat Feb 03, 2007 8:33 am

it sure does... maybe the user who attempted it wasnt logged in properly... although it did come up with his user name... unless that was grabbed from a previous ip?

Code:

http://burnt-clan.com/modules/Forums/images/avatars/gallery/avatar (1602).gif

hmm having trouble displaying above image... could it be because of the spaces?

Posted: Sat Feb 03, 2007 8:37 am

well i cant find it in any way...
when visiting http://burnt-clan.com/modules/Forums/images/avatars/gallery/avatar/1602.gif

in whatever form,it still goes to http://burntclan.swisshut.com

Posted: Sat Feb 03, 2007 9:30 am

yeah thats not the right link, you forgot the space in the link... in my comment there is a space between the avatar & (

eg = galler/avatar_(1602).gif
(where _ = blank space)

Copy and paste this line and it will work:

Code:

http://burnt-clan.com/modules/Forums/images/avatars/gallery/avatar (1602).gif

Posted: Sat Feb 03, 2007 9:31 am

Hitwalker is correct, the avatar does not exist - atleast not with the file name or path you have given.
Make sure the filename for the image does not have any spaces or other non alpha-numeric characters in it.