Post
Topic
Board Beginners & Help
Re: how to add avatar pic?
by
fighter
on 18/02/2014, 19:39:05 UTC
thanks  Smiley
That feature is disabled by the administration i think, because someone told me that it was the reason of forum getting hacked some time ago correct me if i'm wrong . 

How can that be possible?

If you mean how the feature is disabled by theymos, yes it is possible.

If you mean how the forum was hacked with avatar, please check this thread.
https://bitcointalk.org/index.php?topic=306878.0

It was initially suspected by many that the attack was done by exploiting a flaw in SMF which allows you to upload any file to the user avatars directory, and then using a misconfiguration in nginx to execute this file as a PHP script. However, this attack method seems impossible if PHP's security.limit_extensions is set.


Thanks, I meant the latter, but I like your humor.