Remote avatars

[mOdEtWo]

Yeah, I know vB hasn't got remote avatars implemented because of the security. But, hosting avatars on a large board takes a lot of expensive bandwidth.

I figured I could host the avatars for the forum crew (admins and mods + private forum members), as this would eliminate the problem of someone getting an admin's cookie/session.

But the normal users don't need this, who'd want to "hack" a user with no special privileges anyway.

So, could someone make a vB3 hack for using remote avatars?

[Dataforce]

Originally Posted by mOdEtWo

Yeah, I know vB hasn't got remote avatars implemented because of the security. But, hosting avatars on a large board takes a lot of expensive bandwidth.

I figured I could host the avatars for the forum crew (admins and mods + private forum members), as this would eliminate the problem of someone getting an admin's cookie/session.

But the normal users don't need this, who'd want to "hack" a user with no special privileges anyway.

So, could someone make a vB3 hack for using remote avatars?

check out: https://vborg.vbsupport.ru/showthrea...219#post480219

Follow Steps 1 and 2

then for step 3 use the follwoing replacement:

PHP Code:

                if ($avatarid == 0)
                {
            // begin custom avatar code
            global $bbuserinfo;
            if (($bbuserinfo['usergroupid'] == <GROUP ID TO ALLOW REMOTE AVATAR>) OR ($bbuserinfo['usergroupid'] == <ANOTHER GROUP ID TO ALLOW REMOTE AVATAR>))
            {
                // begin custom avatar code
                require_once('./includes/functions_upload.php');
                process_image_upload('avatar', $avatarurl);
                // end custom avatar code
            } else {
                // get maximum filesize/dimensions etc.
                require_once('./includes/functions_upload.php');
                $userinfo = &$bbuserinfo;
                $imagepermissions = &$userinfo['permissions'];
                $type = "avatar";
                $maxwidth = &$imagepermissions[$type . 'maxwidth'];
                $maxheight = &$imagepermissions[$type . 'maxheight'];
                $maxsize = &$imagepermissions[$type . 'maxsize'];


                if ($avatarurl!="" and $avatarurl!="http://www.") {
                    // check valid image
                    if ($imginfo=@getimagesize($avatarurl)) {
                        if (($maxwidth AND $imginfo[0] > $maxwidth) OR ($maxheight AND $imginfo[1] > $maxheight)) {
                            eval(print_standard_error('error_imagebaddimensions'));
                        }
                    } else {
                        if (!$allowimgsizefailure) {
                            eval(print_standard_error('error_imagebadurl'));
                        }
                    }
                    $DB_site->query("UPDATE " . TABLE_PREFIX . "user SET avatar2='".$avatarurl."' WHERE userid='$bbuserinfo[userid]'");
                } 
            }
                        // end custom avatar code
                } 


**UNTESTED**
use at your own risk, i'm not quite sure what you want, but you should be able to modify that to suit.

-DF