I dont think no one had thought of this...

[Chris M]

There is a piece of code you can put in the avatar.php and attachment.php files to stop this...

Here :

PHP Code:

$referers = array ('www.yoursite.com','yoursite.com','your sites ip address'); 

function check_referer($referers){ 
   if (count($referers)){ 
      $found = false; 
      $temp = explode('/',getenv("HTTP_REFERER")); 
      $referer = $temp[2]; 
      for ($x=0; $x < count($referers); $x++){ 
         if (ereg ($referers[$x], $referer)) { 
            $found = true; 
         } 
      } 
      if (!$found){ 
      exit;
      } 
         return $found; 
      } else { 
         return true;
   } 
} 

check_referer($referers); 


Just insert that after

PHP Code:

<?php

and before

PHP Code:

$noheader=1;

//require("./global.php"); 


You will need to change the "www.yoursite.com", "yoursite.com", and "your sites ip address" to your info

Satan