I run a tight ship on user uploaded avatars due to problems long ago with people using bad avatars. I turned on the stock avatars just because a couple people bothered me to death about it.
Anyhow one of my users says:
"it's quite easy to come around the system and use your own image for the avatar.
I just used Web-developer toolbar in firefox to show the hidden edit fields and I could then edit it's contents and submit the form."
Last edited by Rick; 11/08/2006 2:16 PM.
