Empty PMs linked to hacking incident.

[DustyPorViva]

Originally Posted by fowlplay4

It's not that simple, you can log image requests in general. I.e. In Rails:

Started GET "/test_fowlplay4.png" for 127.0.0.1 at 2012-05-21 09:43:46 -0700

I still think the best option will be a white-list of approved image hosts, and then an player-list option to disable the rendering of external images in PMs.

Unless Stefan can script it into the PM system we'll likely need a client update (we're way overdue already).

Not familiar with the wordfilter, so I'll use regex, but would something like this be possible for now?

RULE
CHECK pm
MATCH {php|png|jpg|jpeg|gif}\?.\>
PRECISION 100%
WORDPOSITION part
ACTION log replace
RULEEND

Be possible?