You're right, that worked. I figured phpBB would have done checking to verify the file was of the proper type. What's the point in restricting certain file extensions if this is possible?
<r><EMOJI seq="1f914">🤔</EMOJI></r>before storing them into the database. Do you know what bit of code does that?