Welcome, Guest. Please login or register.
Did you miss your activation email


News: - Make sure you know the Forum Rules and Guidelines

Also check out these related sites:

Author Topic: Quick note about uploading avatars to the server  (Read 31320 times)

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Quick note about uploading avatars to the server
« on: May 09, 2009, 04:32:51 AM »
Two days ago, I was reading about a security vulnerability in the forum software over on the SMF forums. Without going into too many details, it involves uploading an avatar to the server which actually isn't a picture, but a file with php code. Over 1,000 sites using SMF 1.1.8 have been hacked already!

To prevent an attack here, I've temporarily disabled uploading avatar images to the server. If you already have an avatar, this doesn't affect you. Once SMF releases a patch to fix this vulnerability, I will install it and re-enable uploading avatars. Thanks.
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

Rollergirl

  • Guest
Re: Quick note about uploading avatars to the server
« Reply #1 on: May 09, 2009, 05:44:46 PM »
OK.
I didn't understand any of that, only that you are doing a good job!

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #2 on: May 23, 2009, 03:14:49 AM »
We're patched and upgraded, but apparently there are still some security issues with this, so I'm going keep the uploading of avatars turned off for now. It doesn't seem to directly affect anyone anyway.

The interesting (and somewhat scary) thing is that there is 1 hit in the server logs from one of the IP addresses that I banned that was associated with this attack. So there was at least one, albeit foiled, attempt to hack the site.
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

OfflinePottel

  • Founder
  • Founder
  • David Knopfler
  • ***********
  • Posts: 9605
  • Location: Recklinghausen, Germany
  • Registered: August 2008
    • A Mark In Time
Re: Quick note about uploading avatars to the server
« Reply #3 on: May 24, 2009, 10:38:56 AM »
so we are already that popular, dunno if that is a good or a bad sign  :-\
any Knopfler, Floyd or Dylan will do....

OfflineMossguitar

  • Lady writer
  • ****
  • Posts: 503
  • Location: Norway
  • Registered: August 2009
Re: Quick note about uploading avatars to the server
« Reply #4 on: August 07, 2009, 04:07:58 PM »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

Offlineds1984

  • Rüdiger
  • *******
  • Used to be...
  • Posts: 3760
  • Registered: February 2009
Re: Quick note about uploading avatars to the server
« Reply #5 on: August 08, 2009, 12:01:40 AM »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

-> upload it first to a hosting image site such as imageshack or another and then in you profile link it to the hosting site instead of uploading it.

I did that and it is working  nice  ;D

I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
The haters are those who write shit

Two weeks in Australia and Sydney striptease

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #6 on: August 08, 2009, 12:29:30 AM »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

er, yes, I need to do the next upgrade first.
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

OfflineMossguitar

  • Lady writer
  • ****
  • Posts: 503
  • Location: Norway
  • Registered: August 2009
Re: Quick note about uploading avatars to the server
« Reply #7 on: August 08, 2009, 09:22:25 AM »

So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #8 on: August 08, 2009, 03:41:29 PM »

So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?

Yes. Profile > Forum Profile Information > "I have my own pic:"
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #9 on: September 01, 2009, 03:54:55 AM »
I finally had a chance to upgrade the forum to 1.1.10. Uploading avatars has been turned back on.
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

Offlineshangri la 1

  • Founder
  • Juliet
  • ******
  • Hi all and welcome to A.M.I.T.
  • Posts: 2259
  • Location: Australia
  • Registered: August 2008
    • AMIT TV
Re: Quick note about uploading avatars to the server
« Reply #10 on: September 01, 2009, 10:26:54 PM »
 :) Nice work Dan. Good to know you are there keeping this great forum running smoothly.  :D
If we aren't the best MK forum yet - we soon will be.....

OfflineWaterline Man

  • Lady writer
  • ****
  • Posts: 769
  • Location: The green grass of Ireland
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #11 on: September 02, 2009, 11:58:16 AM »


I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
[/quote]

ds1984,
I have this poster with all the Irish gigs from the GH tour framed on a wall at home - its the classic MK pic 8)
If it aint broke dont fix it!

OfflineAFknopfler

  • Guitar George
  • Angelo Fumarola
  • Posts: 36
  • Location: Italy
  • Registered: January 2009
    • Rocking Fingers - Dire Straits/MK Tribute Band from Italy
Re: Quick note about uploading avatars to the server
« Reply #12 on: October 17, 2012, 03:59:18 PM »
Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".

OfflineHoops McCann

  • Dan
  • Founder
  • *****
  • Posts: 1170
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #13 on: October 17, 2012, 04:53:36 PM »
Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".

Can you post a link to the image that you want to use as an avatar here?
"...I was prompted to check out some of the threads you have going which are often unintentionally funny, wildly speculative and sometimes just plain deluded..." - Ed Bicknell

https://soundcloud.com/sunday_driver

OfflineBrianT

  • Camerado
  • ***
  • Posts: 231
  • Location: Ottawa, Canada.
  • Registered: August 2013
Re: Quick note about uploading avatars to the server
« Reply #14 on: December 17, 2015, 10:13:04 PM »
Dan

Can you please tell me what the max size is for an Avatar.

Thanks Brian
Devialet 440PRO - Audioprana SP/DIF-AES/EBU cable,
VPI Classic TurnTable c/w Transfiguration Phoenix Cart, Raysonic 168 CDP, Mac Mini Music Server,
AudioQuest Diamond USB cable, B&W 803D3 (black) Auditorium 23 Cables, Carver TX11 Tuner.

 

© 2024 amarkintime.org
This is an unofficial website dedicated to Mark Knopfler developed and maintained by fans.
Top banner design by Dutchessy.
This theme is based on the SMF theme Carbonate by Bloc.
SMF 2.0.15 | SMF © 2017, Simple Machines
Simple Audio Video Embedder
Simple Audio Video Embedder
Page created in 0.093 seconds with 40 queries.