Quote:
Originally Posted by CrazyLady
well, I don't really care what avatar they have, so checking them isn't an issue... as for ".jpg files, be recognized as .php files"... then why does the board allow [img] tags in users posts and signatures? What is the difference where the picture is loaded, as an avatar or in the post and signature? Why do ALL other bulletin board software have the remote avatar hosted option if it's such a security risk?
I don't really see the big deal... seems a lot of people would like to see this addition to the board.... at least let it be an option one can turn on or off per usergroup.
anyhoo, just my 2 cents... :ermm:
|
good point that being the case, you may be able to make the mod where it processes it via the bbcodeparse function, that way any security checks vB do for [img] would be carried out for your off-site avatars