Dynamic Images ....

[krakjoe]

Why can't I post dynamic images ???

http://krakjoe.com/bunny.php?phrase=Why%20can't%20bugs%20have%20a%20voice%20??

[Peo]

For security reasons I beleive.

[JonnyH]

Yeah, I think there was an exploit before with something to do with that.

[krakjoe]

For security reasons I beleive.

That sucks ...

[themoose]

Eh?

People can just as easily use htaccess to make a php file end in .jpg instead.

And there are no security issues for making a php page (whatever contents) as a source for the img tag.

[krakjoe]

well I sort of see why they done it, because the php script could in theory echo javascript onto the page and the page in turn would execute it, not that you could do a lot but probably when they wrote the rules way back the standard for xmlhttp weren't so strict and xss was "legally" possible, now it's not in IE and Gecko without changing settings, could probably be taken away without any strange behaviour - there are plenty of gamer forums that allow you to use your gamer tag in your sig, same idea .......

[Peo]

Well, we haven't even allowed animated avatars for years since some abused that (not related to security, it just got annoying).

[Richard]

Create a folder called: image.jpg

Inside that folder, create a PHP file (index.php) place your dynamic image code into that index.php file, and then link to the folder as if it was an image ([img]pathtofolder.jpg[/img]) walla, you can post dynamic PHP images.

But we are not allowed to post images in sigs, and I agree with that

EDIT: Oh, the security reasons would be that you could collect the IP, Browser, OS and views of each person that see the dynamic image.

[Yun]

How about dynamic avatars?

[krakjoe]

Create a folder called: image.jpg

Inside that folder, create a PHP file (index.php) place your dynamic image code into that index.php file, and then link to the folder as if it was an image ([img]pathtofolder.jpg[/img]) walla, you can post dynamic PHP images.

But we are not allowed to post images in sigs, and I agree with that

EDIT: Oh, the security reasons would be that you could collect the IP, Browser, OS and views of each person that see the dynamic image.

Almost, but when you have get vars in the url it's treated as a url instead of an image by vb ........ also I'm glad we can't have images in sigs, every page would take forever to load .....

[Yun]

krakjoe, mod_rewrite?

[krakjoe]

I tend to think whatever you try to do, the vB staff thought of it already, it looks like they use a pretty strict regex to allow or disallow images .....

[Yun]

No idea, I guess this would work

http://domain.com/dynsig-variable-variable.jpg

then do a mod_rewrite rule on it..?

[krakjoe]

[Yun]