which part of the image is hackable (i've seen the preferences and viewuser)
preferences:
$image = (@getimagesize($_POST['newpic']));
if ( !is_array($image) ) {
echo 'Invalid Image.
> [url="preferences.php?action=picchange"]Go Back[/url]';
die($h->endpage());
}
Although if you edit it by myphpadmin then it will go through as i believe they didn't add getimagesize on viewuser.
Simple fix would be to goto viewuser...
Replace line 55 :
echo ($r['display_pic'])?'[img='.$r['display_pic'].']':'No Image';
With this:
$image = (@getimagesize($r['display_pic']));
echo ( is_array($image) )?'[img='.$r['display_pic'].']':'No Image';