Empty PMs linked to hacking incident.

[fowlplay4]

Originally Posted by DustyPorViva

Disable php format from being used as an image?

It's not that simple, you can log image requests in general. I.e. In Rails:

Started GET "/test_fowlplay4.png" for 127.0.0.1 at 2012-05-21 09:43:46 -0700

I still think the best option will be a white-list of approved image hosts, and then an player-list option to disable the rendering of external images in PMs.

Unless Stefan can script it into the PM system we'll likely need a client update (we're way overdue already).