| Author |
 Topic  |
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
 Posted - 21 December 2003 : 08:39:09
|
Hi there... I am using CrashCode 3.4, which has an avatar upload mod implemented.
The file upload_avatar_engine.asp which is used by this mod sais this:
'#################################################################################
'# File Attachment Mod by Huw Reddick
'#################################################################################
So, that's why I post this here (as well as at CrashSite, but CrashSite is nearly dead... ).
I have noticed that when someone uploads an avatar, the file is uploaded regardless of a file already existing with that same name.
So, if a member would want to 'mess around' he could simply upload files as avatars, which would replace the avatars of other members, even without having to be approved.
E.g. I could replace all the avatars at sites using this mod with my own avatar...and currently there's nothing that can be done to prevent it....
Therefore I was thinking to make changes to the avatarupload mod, but I am not sure how to proceed:
- avatars uploaded by members should be stored in the folder uploaded\membername\avatars\
- when an avatar has been uploaded for review, the validation page should also show the username (done, see here
- when an avatar is approved, a pm should be sent automatically to the user who requested it.
- only avatars smaller than x pixels wide and y pixels tall can be uploaded.
Do you think this is possible ? Maybe someone can help me with this ?
I've made my current files available through a small zip : http://www.oxle.com/uploaded/marcelg/avatarfiles.zip |
portfolio - linkshrinker - oxle - twitter |
Edited by - MarcelG on 21 December 2003 08:41:47 |
|
|
masterao
Senior Member
Sweden
1678 Posts |
Posted - 21 December 2003 : 09:19:41
|
| If I remember correctly, Huw's original code only allows a member to upload files into a directory named as the membername. I suggest that you look at the code which is part of Huw's portal mod, as this should be fixed there. |
Jan
===========
FR Portal Forums | Active Users 4.0.20 Mod |
 |
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
Posted - 21 December 2003 : 10:19:39
|
masterao, thanks for that remark...however at that site I cannot find a download package or something with the latest code in it...  |
portfolio - linkshrinker - oxle - twitter |
|
|
|
HuwR
Forum Admin
United Kingdom
20584 Posts |
Posted - 21 December 2003 : 11:28:24
|
quote:
Originally posted by masterao
If I remember correctly, Huw's original code only allows a member to upload files into a directory named as the membername. I suggest that you look at the code which is part of Huw's portal mod, as this should be fixed there.
As you correctly state, the original upload mod was mine, the additional code to upload avatars was not  , if you are using crashes code, then I suggest you go there for help. |
|
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
|
|
masterao
Senior Member
Sweden
1678 Posts |
|
| |
Topic |
|
Topic Locked
