I think we need to add some code to any page where you can upload pictures (posts, avatar, ads) to prevent someone from doing this. We know it doesn't work but because it let's you go through with it we'll always have newbies trying it.

This isn't a critical flaw but might be a fun problem for one of you PHP script kiddies

i guess we could check the URL and see if it has something unusual in it, like a "c:\". jeroen, can you put that on the list?

it's noted...

cheers,

Jeroen

thank you Sir ...

you can thank me when/if it gets fixed

cheers,

Jeroen