Welcome, Guest. Please login or register.
Did you miss your activation email


News:
- Make sure you know the Forum Rules and Guidelines

Also check out these related sites:

Author Topic: Quick note about uploading avatars to the server  (Read 10493 times)

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Quick note about uploading avatars to the server
« on: May 09, 2009, 04:32:51 am »
Two days ago, I was reading about a security vulnerability in the forum software over on the SMF forums. Without going into too many details, it involves uploading an avatar to the server which actually isn't a picture, but a file with php code. Over 1,000 sites using SMF 1.1.8 have been hacked already!

To prevent an attack here, I've temporarily disabled uploading avatar images to the server. If you already have an avatar, this doesn't affect you. Once SMF releases a patch to fix this vulnerability, I will install it and re-enable uploading avatars. Thanks.

Rollergirl

  • Guest
Re: Quick note about uploading avatars to the server
« Reply #1 on: May 09, 2009, 05:44:46 pm »
OK.
I didn't understand any of that, only that you are doing a good job!

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #2 on: May 23, 2009, 03:14:49 am »
We're patched and upgraded, but apparently there are still some security issues with this, so I'm going keep the uploading of avatars turned off for now. It doesn't seem to directly affect anyone anyway.

The interesting (and somewhat scary) thing is that there is 1 hit in the server logs from one of the IP addresses that I banned that was associated with this attack. So there was at least one, albeit foiled, attempt to hack the site.

OfflinePottel

  • Editor
  • David Knopfler
  • ***********
  • Posts: 8906
  • Location: Ratingen, Germany
  • Registered: August 2008
    • A Mark In Time
Re: Quick note about uploading avatars to the server
« Reply #3 on: May 24, 2009, 10:38:56 am »
so we are already that popular, dunno if that is a good or a bad sign  :-\
any Knopfler, Floyd or Dylan will do....

OfflineMossguitar

  • Camerado
  • ***
  • Posts: 440
  • Location: Norway
  • Registered: August 2009
Re: Quick note about uploading avatars to the server
« Reply #4 on: August 07, 2009, 04:07:58 pm »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

Offlineds1984

  • Rüdiger
  • *******
  • Used to be...
  • Posts: 3184
  • Registered: February 2009
Re: Quick note about uploading avatars to the server
« Reply #5 on: August 08, 2009, 12:01:40 am »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

-> upload it first to a hosting image site such as imageshack or another and then in you profile link it to the hosting site instead of uploading it.

I did that and it is working  nice  ;D

I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
Fan of Dire Straits since 1984

Two weeks in Australia and Sydney striptease

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #6 on: August 08, 2009, 12:29:30 am »
Hi! Is it still not possible to upload avatar images? I'm trying to upload my own pic to my profile, (150x225 pixles), but that ain't working.. :-)

Morten

er, yes, I need to do the next upgrade first.

OfflineMossguitar

  • Camerado
  • ***
  • Posts: 440
  • Location: Norway
  • Registered: August 2009
Re: Quick note about uploading avatars to the server
« Reply #7 on: August 08, 2009, 09:22:25 am »

So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #8 on: August 08, 2009, 03:41:29 pm »

So that means I have to wait a bit, then?

The image is on my facebook profile. I just have to link to the URL of that perticular image, and then it should be OK?

Yes. Profile > Forum Profile Information > "I have my own pic:"

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #9 on: September 01, 2009, 03:54:55 am »
I finally had a chance to upgrade the forum to 1.1.10. Uploading avatars has been turned back on.

Offlineshangri la 1

  • Editor
  • Juliet
  • ******
  • Hi all and welcome to A.M.I.T.
  • Posts: 2207
  • Location: Australia
  • Registered: August 2008
    • AMIT TV
Re: Quick note about uploading avatars to the server
« Reply #10 on: September 01, 2009, 10:26:54 pm »
 :) Nice work Dan. Good to know you are there keeping this great forum running smoothly.  :D
If we aren't the best MK forum yet - we soon will be.....

OfflineWaterline Man

  • Lady writer
  • ****
  • Posts: 772
  • Location: The green grass of Ireland
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #11 on: September 02, 2009, 11:58:16 am »


I like this pic sooooooooooooooooooo much! If only I could buy an original print of it.
[/quote]

ds1984,
I have this poster with all the Irish gigs from the GH tour framed on a wall at home - its the classic MK pic 8)
If it aint broke dont fix it!

OfflineAFknopfler

  • Guitar George
  • Angelo Fumarola
  • Posts: 38
  • Location: Italy
  • Registered: January 2009
    • Rocking Fingers - Dire Straits/MK Tribute Band from Italy
Re: Quick note about uploading avatars to the server
« Reply #12 on: October 17, 2012, 03:59:18 pm »
Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".

OfflineHoops McCann

  • Dan
  • Editor
  • *****
  • Posts: 1165
  • Location: Floating Away
  • Registered: August 2008
Re: Quick note about uploading avatars to the server
« Reply #13 on: October 17, 2012, 04:53:36 pm »
Hello, I can't change my avatar. When I upload or put a link to an image I see a "error message".

Can you post a link to the image that you want to use as an avatar here?

OfflineBrianT

  • Camerado
  • ***
  • Posts: 222
  • Location: Ottawa, Canada.
  • Registered: August 2013
Re: Quick note about uploading avatars to the server
« Reply #14 on: December 17, 2015, 10:13:04 pm »
Dan

Can you please tell me what the max size is for an Avatar.

Thanks Brian
Devialet 440PRO - Audioprana SP/DIF-AES/EBU cable,
VPI Classic TurnTable c/w Transfiguration Phoenix Cart, Raysonic 168 CDP, Mac Mini Music Server,
AudioQuest Diamond USB cable, B&W 803D3 (black) Auditorium 23 Cables, Carver TX11 Tuner.

 

© 2018 amarkintime.org
This is an unofficial website dedicated to Mark Knopfler developed and maintained by fans.
Top banner design by knopflerized.
This theme is based on the SMF theme Carbonate by Bloc.
SMF 2.0.15 | SMF © 2017, Simple Machines
Simple Audio Video Embedder
Simple Audio Video Embedder
Page created in 0.056 seconds with 38 queries.