A Mark In Time

Start Here => Forum Rules and Quick Guides => Topic started by: Hoops McCann on May 09, 2009, 04:32:51 AM

Title: Quick note about uploading avatars to the server
Post by: Hoops McCann on May 09, 2009, 04:32:51 AM: Two days ago, I was reading about a security vulnerability in the forum software over on the SMF forums. Without going into too many details, it involves uploading an avatar to the server which actually isn't a picture, but a file with php code. Over 1,000 sites using SMF 1.1.8 have been hacked already!

To prevent an attack here, I've temporarily disabled uploading avatar images to the server. If you already have an avatar, this doesn't affect you. Once SMF releases a patch to fix this vulnerability, I will install it and re-enable uploading avatars. Thanks.
Title: Re: Quick note about uploading avatars to the server
Post by: Rollergirl on May 09, 2009, 05:44:46 PM: OK.
I didn't understand any of that, only that you are doing a good job!
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on May 23, 2009, 03:14:49 AM: We're patched and upgraded, but apparently there are still some security issues with this, so I'm going keep the uploading of avatars turned off for now. It doesn't seem to directly affect anyone anyway.

The interesting (and somewhat scary) thing is that there is 1 hit in the server logs from one of the IP addresses that I banned that was associated with this attack. So there was at least one, albeit foiled, attempt to hack the site.
Title: Re: Quick note about uploading avatars to the server
Post by: Pottel on May 24, 2009, 10:38:56 AM: so we are already that popular, dunno if that is a good or a bad sign :-\
Title: Re: Quick note about uploading avatars to the server
Post by: Mossguitar on August 07, 2009, 04:07:58 PM: Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten
Title: Re: Quick note about uploading avatars to the server
Post by: ds1984 on August 08, 2009, 12:01:40 AM: Quote from: Mossguitar on August 07, 2009, 04:07:58 PM
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

-> upload it first to a hosting image site such as imageshack or another and then in you profile link it to the hosting site instead of uploading it.

I did that and it is working nice ;D

I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on August 08, 2009, 12:29:30 AM: Quote from: Mossguitar on August 07, 2009, 04:07:58 PM
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

er, yes, I need to do the next upgrade first.
Title: Re: Quick note about uploading avatars to the server
Post by: Mossguitar on August 08, 2009, 09:22:25 AM: So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on August 08, 2009, 03:41:29 PM: Quote from: Mossguitar on August 08, 2009, 09:22:25 AM

So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?

Yes. Profile > Forum Profile Information > "I have my own pic:"
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on September 01, 2009, 03:54:55 AM: I finally had a chance to upgrade the forum to 1.1.10. Uploading avatars has been turned back on.
Title: Re: Quick note about uploading avatars to the server
Post by: shangri la 1 on September 01, 2009, 10:26:54 PM: :) Nice work Dan. Good to know you are there keeping this great forum running smoothly. :D
If we aren't the best MK forum yet - we soon will be.....
Title: Re: Quick note about uploading avatars to the server
Post by: Waterline Man on September 02, 2009, 11:58:16 AM: I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
[/quote]

ds1984,
I have this poster with all the Irish gigs from the GH tour framed on a wall at home - its the classic MK pic 8)
Title: Re: Quick note about uploading avatars to the server
Post by: AFknopfler on October 17, 2012, 03:59:18 PM: Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on October 17, 2012, 04:53:36 PM: Quote from: AFknopfler on October 17, 2012, 03:59:18 PM
Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".

Can you post a link to the image that you want to use as an avatar here?
Title: Re: Quick note about uploading avatars to the server
Post by: BrianT on December 17, 2015, 10:13:04 PM: Dan

Can you please tell me what the max size is for an Avatar.

Thanks Brian
Title: Re: Quick note about uploading avatars to the server
Post by: Hoops McCann on December 18, 2015, 05:35:20 AM: Quote from: BrianT on December 17, 2015, 10:13:04 PM
Dan

Can you please tell me what the max size is for an Avatar.

Thanks Brian

For both uploaded and externally linked avatars, the maximum width is 175 pixels and the maximum height is 225 pixels.
Title: Re: Quick note about uploading avatars to the server
Post by: BrianT on December 18, 2015, 08:48:24 AM: Quote from: Dan on December 18, 2015, 05:35:20 AM
Quote from: BrianT on December 17, 2015, 10:13:04 PM
Dan

Can you please tell me what the max size is for an Avatar.

Thanks Brian

For both uploaded and externally linked avatars, the maximum width is 175 pixels and the maximum height is 225 pixels.

Dan

Thanks changed avatar with no problems

Brian