Thread

On a live EE2 site I’m admin for, some nutter is continuously uploading images of scantily clad ladies in the member_photos folder. I’m stumped to how he/she’s doing it, I’ve checked all members and their profiles and everything seems legit..
Any ideas on how to secure this folder/prevent these uploads?

Hi, e-man,

That is a bit disturbing, we take security seriously so let’s see if we can figure this out.  Are you positive they’re being uploaded from EE?  I’d recommend asking your host if they can trace how they were uploaded; I’d be worried about a hack into the server itself.

The best way to find the point of entry is to talk to your server admin - they should be able to find logs that help indicate what may be going on.

Thank you!

Already checked in with the host (Engine) who ran an exploit check, clean bill of health there. Going to investigate further.

e-man, do you want to prevent uploads to member photos entirely (or do you already) or is it more a matter of trying to catch someone who is abusing their permission to upload.

In other words, is ‘Enable Member Photos’ off and images are getting in there anyway?