No avatars allowed to be linked from another site

Any board related changes or announcements can be found here.

No avatars allowed to be linked from another site

Postby Jeff Johnson » Mon 22 Mar 2010 7:01 pm

Due to an experience with avatars linked from another site causing malware alerts, I have made the following change in the forum configuration:
Enable remote avatars: NO
Avatars linked to from another website.

This may cause some people's avatars to no longer display. If this affects you, you can fix this by doing the following:
  • Select User Control Panel above.
  • Select the Profile tab.
  • Select Edit avatar on the left side.
  • Click the Browse... button.
  • In the File Upload dialog box, find your desired avatar image and click Open.
  • Click the Submit button.

Thank you for your patience.
IANAL => I Am Not A Lawyer
NRA Life Member | USSC | CCRKBA | UtahConcealedCarry.com
User avatar
Jeff Johnson
Site Admin
 
Posts: 5616
Joined: Mon 03 May 2004 7:48 pm
Location: Cache Valley

Re: No avatars allowed to be linked from another site

Postby divegeek » Mon 22 Mar 2010 8:28 pm

FYI, it appears that turning off that option has not removed the remote avatars of those who already have them.
Four boxes protect our liberty: soap, ballot, jury and ammo. Use in that order.

Utah CFP Instructor; NRA Certified Instructor for Pistol, Rifle and Self-Defense in the Home; NRA RSO.

I am not a lawyer!
User avatar
divegeek
Top Shot
 
Posts: 8757
Joined: Sat 05 Jan 2008 10:59 pm
Location: Layton, Utah

Re: No avatars allowed to be linked from another site

Postby Snurd » Mon 22 Mar 2010 8:33 pm

I'm still getting the warnings as of now.
Snurd
Posse
 
Posts: 9873
Joined: Sat 19 Jan 2008 10:24 am
Location: SLC

Re: No avatars allowed to be linked from another site

Postby MarshallDodge » Mon 22 Mar 2010 8:59 pm

Try it now. I uploaded new avatars that are not linked to my site.

Sorry about this guys. I have sent stuff back and forth to Comcast about what is going on and spent an hour on the phone with a tech support person who was not that knowledgeable but she at least was making an effort.
Kirk
-Seconds count, misses don't-
"The sword is more important than the shield, and skill is more important than either. The final weapon is the brain. All else is supplemental." John Steinbeck
User avatar
MarshallDodge
Sniper
 
Posts: 2750
Joined: Sun 27 Apr 2008 5:16 pm
Location: Weber County

Re: No avatars allowed to be linked from another site

Postby Jeff Johnson » Mon 22 Mar 2010 11:22 pm

divegeek wrote:FYI, it appears that turning off that option has not removed the remote avatars of those who already have them.

Can you PM me some examples?
IANAL => I Am Not A Lawyer
NRA Life Member | USSC | CCRKBA | UtahConcealedCarry.com
User avatar
Jeff Johnson
Site Admin
 
Posts: 5616
Joined: Mon 03 May 2004 7:48 pm
Location: Cache Valley

Re: No avatars allowed to be linked from another site

Postby Snurd » Tue 23 Mar 2010 6:51 am

MarshallDodge wrote:Try it now. I uploaded new avatars that are not linked to my site.

I haven't had any issues this morning, that musta fixed it. :thumbsup:
Snurd
Posse
 
Posts: 9873
Joined: Sat 19 Jan 2008 10:24 am
Location: SLC

Re: No avatars allowed to be linked from another site

Postby MarshallDodge » Tue 23 Mar 2010 7:02 am

mqondo wrote:
MarshallDodge wrote:Try it now. I uploaded new avatars that are not linked to my site.

I haven't had any issues this morning, that musta fixed it. :thumbsup:

Good deal.

Jeff- I believe divegeek is correct. There must be some residual code on the pages that is requesting the images. Even though I had deleted the images from my site, and checked the "delete image" box in the Edit Avatar area of the Control Panel, the page was still requesting it. It seems that the issue went away after I uploaded a replacement image.

I confirmed last nigh that my page did not contain malware. The only way you would have been infected is if you had gone to my home page which had been hacked, and would redirect you to the malware site. All the images were fine.
Kirk
-Seconds count, misses don't-
"The sword is more important than the shield, and skill is more important than either. The final weapon is the brain. All else is supplemental." John Steinbeck
User avatar
MarshallDodge
Sniper
 
Posts: 2750
Joined: Sun 27 Apr 2008 5:16 pm
Location: Weber County

Re: No avatars allowed to be linked from another site

Postby divegeek » Tue 23 Mar 2010 7:25 am

Jeff Johnson wrote:
divegeek wrote:FYI, it appears that turning off that option has not removed the remote avatars of those who already have them.

Can you PM me some examples?

Until he manually changed it, MarshallDodge still had his remote avatar. I don't know if anyone else does, and I can't show you him as an example because he changed it.

I Googled a bit for information about the phpbb database structure, and unless the information I found is wrong, you could do a simple SQL query to identify all users who have a remote avatar. Something like:

Code: Select all
SELECT username FROM phpbb_users WHERE user_avatar_type=2

Based on what I found, users with uploaded avatars have type 1 and those with the default avatar have type 0.
Four boxes protect our liberty: soap, ballot, jury and ammo. Use in that order.

Utah CFP Instructor; NRA Certified Instructor for Pistol, Rifle and Self-Defense in the Home; NRA RSO.

I am not a lawyer!
User avatar
divegeek
Top Shot
 
Posts: 8757
Joined: Sat 05 Jan 2008 10:59 pm
Location: Layton, Utah

Re: No avatars allowed to be linked from another site

Postby Jeff Johnson » Tue 23 Mar 2010 5:25 pm

Thanks. I'll try that.

I'm betting that the reason that Kirk's avatar kept requesting the remote one for people was because of browser caching.
IANAL => I Am Not A Lawyer
NRA Life Member | USSC | CCRKBA | UtahConcealedCarry.com
User avatar
Jeff Johnson
Site Admin
 
Posts: 5616
Joined: Mon 03 May 2004 7:48 pm
Location: Cache Valley

Re: No avatars allowed to be linked from another site

Postby divegeek » Tue 23 Mar 2010 5:59 pm

Jeff Johnson wrote:Thanks. I'll try that.

I'm betting that the reason that Kirk's avatar kept requesting the remote one for people was because of browser caching.

I thought about that and cleared my cache and restarted my browser to check. Still got the warnings until he changed it.
Four boxes protect our liberty: soap, ballot, jury and ammo. Use in that order.

Utah CFP Instructor; NRA Certified Instructor for Pistol, Rifle and Self-Defense in the Home; NRA RSO.

I am not a lawyer!
User avatar
divegeek
Top Shot
 
Posts: 8757
Joined: Sat 05 Jan 2008 10:59 pm
Location: Layton, Utah


Return to Site Announcements

Who is online

Users browsing this forum: No registered users and 1 guest