MyBB Community Forums

Full Version: Remove the ability to link an avatar
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
How would you completely remove the ability to "link" an avatar on your forum. Going into the template and removing the input box helps but all you need to do is add it back via inspect elements and it's still fully functional. Can someone explain how to disable this feature completely?
bump. Still need this answered
Core edits are required.
(08-31-2016, 07:50 PM)Sazze Wrote: [ -> ]Core edits are required.

Wow that's helpful, thank you oh php lord sazze.
(08-30-2016, 05:59 AM)Nasro Wrote: [ -> ]How would you completely remove the ability to "link" an avatar on your forum. Going into the template and removing the input box helps but all you need to do is add it back via inspect elements and it's still fully functional. Can someone explain how to  disable this feature completely?

Would anyone really do this? Are you facing some particularly grievous security scenario?
Hi,

You can remove the input box from the templates, then you can edit ./usercp.php if you want to make sure they can't be used. The section in question starts here: https://github.com/mybb/mybb/blob/featur....php#L2028

I would remove everything in that else branch and replace it with:

else // remote avatar
{
    $avatar_error = $lang->error_invalidavatarurl;
}

Then any kind of remote avatar (including Gravatars) will result in an error saying that the URL is invalid.
(09-01-2016, 06:42 PM)brad-t Wrote: [ -> ]Would anyone really do this? Are you facing some particularly grievous security scenario?

If you are behind some DDOS protection, and you don't want to link to your internal IP (which is not protected).