Option to prohibit avatars from insecure sites

https://www.phpbb.com/ideas/
Post Reply
Drakath
Registered User
Posts: 125
Joined: Wed Aug 29, 2012 12:17 pm

Option to prohibit avatars from insecure sites

Post by Drakath »

There should be an option to only allow HTTPS avatars when using remote links in order to prevent mixed content warnings.
User avatar
vader696
Translator
Posts: 122
Joined: Sat Jan 21, 2017 11:38 am
Location: Krakow, Poland
Contact:

Re: Option to prohibit avatars from insecure sites

Post by vader696 »

In this case you should disallow any content from websites which are use http, eg. enclosed links from other sites, not only avatars.

In my opinion just disallow option to use avatars from other websites or add point to your forum regulations.
User avatar
jackennils
Registered User
Posts: 229
Joined: Mon Jun 01, 2009 7:48 pm

Re: Option to prohibit avatars from insecure sites

Post by jackennils »

Exactly. Just let people upload the avatars to your site and you're done.
Wes of StarArmy
Registered User
Posts: 291
Joined: Fri Mar 04, 2005 2:59 am
Location: StarArmy.com
Contact:

Re: Option to prohibit avatars from insecure sites

Post by Wes of StarArmy »

Wouldn't it make more sense to proxy the images on the forum?

A proxied image would look something like:

Code: Select all

https://example.com/phpbb/proxy.php?url=http://some.insecure.site/avatarimage.jpg
I agree that allowing avatars to be uploaded is the easiest fix.
paul7289
Registered User
Posts: 5
Joined: Fri May 18, 2018 1:03 pm
Contact:

Re: Option to prohibit avatars from insecure sites

Post by paul7289 »

Wes of StarArmy wrote: Thu May 10, 2018 2:41 pm Wouldn't it make more sense to proxy the images on the forum?

A proxied image would look something like:

Code: Select all

https://example.com/phpbb/proxy.php?url=http://some.insecure.site/avatarimage.jpg
I agree that allowing avatars to be uploaded is the easiest fix.
That's a nice workaround. So you could allow uploading avatars and will not have any problems with the SSL.
Drakath
Registered User
Posts: 125
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath »

Setting up a proxy server is not always an option for some people. Uploading avatars is also not a solution that will always satisfy everyone since some board owners (especially ones who host their sites in Europe) are concerned about possible copyright implications due to hosting these images.
Drakath
Registered User
Posts: 125
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath »

vader696 wrote: Fri Apr 27, 2018 11:24 am In this case you should disallow any content from websites which are use http, eg. enclosed links from other sites, not only avatars.
Disallowing http in BBCode is already possible with an extension, hence I did not mention it in this topic. As for avatars, the only option currently is disabling remote avatars. I already mentioned why that is not a perfect solution, in addition remote avatars can in some cases be dynamic which is not possible with uploaded ones.
Last edited by Drakath on Sat Apr 27, 2019 9:05 am, edited 1 time in total.
User avatar
david63
Registered User
Posts: 20646
Joined: Thu Dec 19, 2002 8:08 am

Re: Option to prohibit avatars from insecure sites

Post by david63 »

Drakath wrote: Sat Apr 27, 2019 8:44 am some board owners (especially ones who host their sites in Europe) are concerned about possible copyright implications due to hosting these images.
If you are referring to the upcoming EU regulation then that is not a problem as the likes of avatars are specifically excluded.
David
Remember: You only know what you know and - you don't know what you don't know!

I now no longer support any of my extensions but they will start to become available here
Drakath
Registered User
Posts: 125
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath »

david63 wrote: Sat Apr 27, 2019 8:51 am If you are referring to the upcoming EU regulation then that is not a problem as the likes of avatars are specifically excluded.
Could you provide the source of this information?
User avatar
david63
Registered User
Posts: 20646
Joined: Thu Dec 19, 2002 8:08 am

Re: Option to prohibit avatars from insecure sites

Post by david63 »

One of many
Your memes will be safe. The good news is that memes will not be banned, and will be allowed alongside quotation, criticism, review, caricature, parody and pastiche (like GIFs) will be specifically allowed.”
Source: https://www.telegraph.co.uk/technology/ ... directive/

A Google search will show many more the same
David
Remember: You only know what you know and - you don't know what you don't know!

I now no longer support any of my extensions but they will start to become available here
Drakath
Registered User
Posts: 125
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath »

david63 wrote: Sat Apr 27, 2019 9:46 am One of many
Your memes will be safe. The good news is that memes will not be banned, and will be allowed alongside quotation, criticism, review, caricature, parody and pastiche (like GIFs) will be specifically allowed.”
Source: https://www.telegraph.co.uk/technology/ ... directive/

A Google search will show many more the same

And what defines an avatar? In which category does it fall?
Post Reply

Return to “phpBB Ideas”