Bitcoin Forum
July 09, 2024, 02:56:17 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: how to add avatar pic?  (Read 1128 times)
Sonny
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000


View Profile
February 19, 2014, 09:45:58 AM
 #21

thanks  Smiley
That feature is disabled by the administration i think, because someone told me that it was the reason of forum getting hacked some time ago correct me if i'm wrong . 

How can that be possible?

If you mean how the feature is disabled by theymos, yes it is possible.

If you mean how the forum was hacked with avatar, please check this thread.
https://bitcointalk.org/index.php?topic=306878.0

It was initially suspected by many that the attack was done by exploiting a flaw in SMF which allows you to upload any file to the user avatars directory, and then using a misconfiguration in nginx to execute this file as a PHP script. However, this attack method seems impossible if PHP's security.limit_extensions is set.


So if it wasn't that then why haven't they reinstated them?



Probably because the new forum software is being developed, and theymos wants to focus on it...
You may find some info here.
https://bitcointalk.org/index.php?topic=451893.0 and https://bitcointalk.org/index.php?topic=455867.0
guybrushthreepwood
Legendary
*
Offline Offline

Activity: 1232
Merit: 1195



View Profile
February 19, 2014, 12:41:28 PM
 #22

thanks  Smiley
That feature is disabled by the administration i think, because someone told me that it was the reason of forum getting hacked some time ago correct me if i'm wrong . 

How can that be possible?

If you mean how the feature is disabled by theymos, yes it is possible.

If you mean how the forum was hacked with avatar, please check this thread.
https://bitcointalk.org/index.php?topic=306878.0

It was initially suspected by many that the attack was done by exploiting a flaw in SMF which allows you to upload any file to the user avatars directory, and then using a misconfiguration in nginx to execute this file as a PHP script. However, this attack method seems impossible if PHP's security.limit_extensions is set.


So if it wasn't that then why haven't they reinstated them?



Probably because the new forum software is being developed, and theymos wants to focus on it...
You may find some info here.
https://bitcointalk.org/index.php?topic=451893.0 and https://bitcointalk.org/index.php?topic=455867.0


I don't see how simply reinstating avatars would take away focus from the new forum. And he seems to have a team working on that. not him.
oriel2
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile WWW
February 19, 2014, 12:48:02 PM
 #23

was wondering about this too
Sonny
Hero Member
*****
Offline Offline

Activity: 868
Merit: 1000


View Profile
February 19, 2014, 01:15:51 PM
 #24

I don't see how simply reinstating avatars would take away focus from the new forum. And he seems to have a team working on that. not him.

No idea.
BTW, there are already dozens of threads in meta asking about the avatar for the past 3 months.
InCoinsITrust
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
February 19, 2014, 01:24:42 PM
 #25

atleast this thread explains it all.
lemfuture (OP)
Hero Member
*****
Offline Offline

Activity: 686
Merit: 500


View Profile
February 20, 2014, 09:20:16 PM
 #26

atleast this thread explains it all.
yes thanks for the read guys!

1ADLcfwTofFXb95pKhebpeRkJ4WTWsvQXB
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!