Signature Image Upload-Hack??

[Chris M]

Right : News!!!

Ive done all the file editing (i think), all the queries, and all the "add new" templates...

The only thing left is for Template editing

I should be complete tomorrow for a Beta Hack release

Satan

[Erwin]

Originally posted by hellsatan
This is not the same as I am doing...

This uploads it to the database, and displays it in the postbit SEPERATE to the signature

This way you can disable IMG tags as well

Satan

It's better if it's not in the database - because you can .htaccess protect the directory they are in to prevent leeching.

[Chris M]

But with this, Ive included a bit of code which stops users using outside your specified domain...

Its kind of the same thing, except I dont know how to do it with .htaccess, so I did it this way instead

Here is the code im using Erwin:

$referers = array ('www.yoursite.com','yoursite.com','ip address here'); 

function check_referer($referers){ 
   if (count($referers)){ 
      $found = false; 
      $temp = explode('/',getenv("HTTP_REFERER")); 
      $referer = $temp[2]; 
      for ($x=0; $x < count($referers); $x++){ 
         if (ereg ($referers[$x], $referer)) { 
            $found = true; 
         } 
      } 
      if (!$found){ 
      exit;
      } 
         return $found; 
      } else { 
         return true;
   } 
} 

check_referer($referers);

You can add that to attachment.php and avatar.php too

Satan