UBB.Developers Forums UBB.threads 7 Development How Do I? Posting images hosted on Shutterfly

One of my users wants to post an image being hosted on shutterfly. She has posted the following:

[img]http://im1.shutterfly.com/procserv/47b4dc28b3127cce9abccff5902900000026118BcMnLVq3a0[/img]

The image won't show up on Threads 6.5. The only thing I can figure is because the image is missing the ".jpg" extension. Is there anyway she can post pictures hosted at this site? She claims she was able to do this when we ran the board on Classic.

Yeah, that's not an image URL, it's a URL to a script. This is disabled in threads, because allowing users to embed a script in the page poses a pretty big security risk.

Actually this site was hacked this week due to a similar exploit in another software program installed (not threads). You could modify things to allow it, but I sure wouldn't. If you take the valid image checks away, the user could potentially execute code and/or read cookies of your users using the image tag.

In the past Classic (and actually in the past UBB.Threads) didn't have the checks in place to make sure it's really an image URL being used.

Thanks Josh!