Announcement

Collapse
No announcement yet.

Custom avatars bug

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Custom avatars bug

    I had the opportunity to test the vbulletin of my friend's website. I've noticed that is not possible to choose the file type for custom avatars. In fact, we were able to upload a .exe file instead of an image. Isn't it dangerous for the security of the system?

  • #2
    No, because the file is never executed or put in a situtation where it could be executed. Uploading anything other than a GIF or JPG will give an error.

    Comment


    • #3
      It's also smart enough so if you upload a PHP file as an attachment to a post, it won't execute the file. Just as a side note.
      --filburt1, vBulletin.org/vBulletinTemplates.com moderator
      Web Design Forums.net: vB Board of the Month
      vBulletin Mail System (vBMS): webmail for your forum users

      Comment

      widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
      Working...
      X