Yeah, that Avatar hack can let you really upload anything, what you need to do is put a size limit so people can't upload and also somehow it should have been so it reads by your username not your Member number.
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
