Only allow uploaded pics for avatars, no URLs, and scan the shit out of them when they're uploaded. Still leaves FTR vulnerable to any other infected gifs that get posted elsewhere, I guess. Dunno enough about it to know how you can make FTR completely bulletproof without disallowing pics altogether. What do the experts say?Originally Posted by Xianti