News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

Uploadable avatars in a custom directory

Started by tycms, March 18, 2011, 09:18:57 PM

Previous topic - Next topic

tycms

If attachments are disabled and a custom directory (/home/{account}/public_html/custom_dir) is defined for avatar uploads, will there any extra security issues?

When avatars are uploaded to the attachments directory, the links to images are masked. How can I do this with a custom directory? Using .htaccess file?

Arantor

QuoteWhen avatars are uploaded to the attachments directory, the links to images are masked. How can I do this with a custom directory? Using .htaccess file?

You can't, that's sort of the point. By not masking them you can achieve a significant performance boost. And no, there's no security issue - if there was, the team wouldn't do that very setting on this site.

tycms

Thank you Arantor. I didn't notice that the team was doing exactly the same thing here. :)

Advertisement: