Animated avatars? What happened?

[Sunny G]

For what reason are we no longer allowed to use animated avatars? :confused:

[\\.\]

You mean avatars that are GIF files? a gif file can contain executable code as well as audio.

BIG Security problem for forums and was for a while an easy way to Hijack a thread and have all viewers redirected to other websites.

[Sunny G]

You're kidding! Is it only animated GIFs'? Or is it just GIF in general?
In any case, Google tells me nothing about this. Can the maliciousness in these "GIF's" be detected?

[\\.\]

Gif in general can be packed with extras.

Try reading this while on the toilet! http://www.phpclasses.org/blog/post/67-PHP-security-exploit-with-GIF-images.html

[Sunny G]

I understand the decision the forum overlords needed to make, and I would have done the same.
However, is there no way to differentiate "malevolent" GIFs from normal ones?

[bathurst_guy]

According to that article as long as the gif has .gif only as it's file extension and not .gif.php then it doesn't appear malicious. Couldn't you very easily just check and enforce specific file extensions and mime-type.

[JPnyc]

I never changed the setting to begin with, at least not that I remember. It must have come as the result of the last upgrade, however I have changed it back.

[Sunny G]

You changed it back? It doesn't seem to be working, at least for animated GIFs. Normal ones are accepted.

[stacywacy]

I never changed the setting to begin with, at least not that I remember. It must have come as the result of the last upgrade, however I have changed it back.

It was changed back :eek:. YEY! Now, I can go back to my very annoying walking red dote. :D :)
.

[stacywacy]

You changed it back? It doesn't seem to be working, at least for animated GIFs. Normal ones are accepted.

I agree with this. I tried to upload an animated gif and I get this message: "You may not upload animated images." :(
.

[Sunny G]

Ahhh. Order has been brought to utter chaos. Thanks!