Bug? Exploit?
<img src="https://www.ubbcentral.com/boards/images/graemlins/confused.gif" alt="" />
Do you realize that someone could easily write a script that essentially "clicks" on any or every link on your board, quickly and repeatedly? Did you realize that this facility is actually built into every version of IE since 5.0?
The particular script that you cite opens the avatars directory, read the files, sorts them and displays them.
The more avatars you have, then the more resource it takes to read the directory, sort them, then display them.
You could put a flood check on it, but then nobody could scroll through your avatars if you have more than one page.
About the only thing you could do is make sure the requestor is logged in.
Open ubb_lib_misc. Find
"sub avatar_select_menu{"
insert under on a new line: "&RequireUserLogin;"
If the user that is doing this is logged in then there is nothing to stop it, but then... how do we know if it is a legitimate request to view your avatars or not?
111 40 141155 40 15016515614716217156 40 12715014116447163 40 146157162 40 15416515614315077
