thanks

That feature is disabled by the administration i think, because someone told me that it was the reason of forum getting hacked some time ago correct me if i'm wrong .
How can that be possible?
If you mean how the feature is disabled by theymos, yes it is possible.
If you mean how the forum was hacked with avatar, please check this thread.
https://bitcointalk.org/index.php?topic=306878.0It was initially suspected by many that the attack was done by exploiting a flaw in SMF which allows you to upload any file to the user avatars directory, and then using a misconfiguration in nginx to execute this file as a PHP script. However, this attack method seems impossible if PHP's security.limit_extensions is set.