Yeah, I know vB hasn't got remote avatars implemented because of the security. But, hosting avatars on a large board takes a lot of expensive bandwidth.
I figured I could host the avatars for the forum crew (admins and mods + private forum members), as this would eliminate the problem of someone getting an admin's cookie/session.
But the normal users don't need this, who'd want to "hack" a user with no special privileges anyway.
So, could someone make a vB3 hack for using remote avatars? :)
check out: https://vborg.vbsupport.ru/showthread.php?p=480219#post480219
Follow Steps 1 and 2
then for step 3 use the follwoing replacement:
if ($avatarid == 0)
{
// begin custom avatar code
global $bbuserinfo;
if (($bbuserinfo['usergroupid'] == <GROUP ID TO ALLOW REMOTE AVATAR>) OR ($bbuserinfo['usergroupid'] == <ANOTHER GROUP ID TO ALLOW REMOTE AVATAR>))
{
// begin custom avatar code
require_once('./includes/functions_upload.php');
process_image_upload('avatar', $avatarurl);
// end custom avatar code
} else {
// get maximum filesize/dimensions etc.
require_once('./includes/functions_upload.php');
$userinfo = &$bbuserinfo;
$imagepermissions = &$userinfo['permissions'];
$type = "avatar";
$maxwidth = &$imagepermissions[$type . 'maxwidth'];
$maxheight = &$imagepermissions[$type . 'maxheight'];
$maxsize = &$imagepermissions[$type . 'maxsize'];
if ($avatarurl!="" and $avatarurl!="http://www.") {
// check valid image
if ($imginfo=@getimagesize($avatarurl)) {
if (($maxwidth AND $imginfo[0] > $maxwidth) OR ($maxheight AND $imginfo[1] > $maxheight)) {
eval(print_standard_error('error_imagebaddimension s'));
}
} else {
if (!$allowimgsizefailure) {
eval(print_standard_error('error_imagebadurl'));
}
}
$DB_site->query("UPDATE " . TABLE_PREFIX . "user SET avatar2='".$avatarurl."' WHERE userid='$bbuserinfo[userid]'");
}
}
// end custom avatar code
}
**UNTESTED**
use at your own risk, i'm not quite sure what you want, but you should be able to modify that to suit.
-DF