Try to prevent (as much as possible) transfering and, more important, storing, any other files than avatars as png, gif and jpg. The headers of the files are checked whether they are valid for the corresponding format. Files without gif/png/jpg header are never stored on the server, and thus cannot be requested by any client.
This commit is contained in:
@@ -417,7 +417,7 @@ ServerLobbyThread::HandleNetPacketAvatarHeader(SessionWrapper session, const Net
|
||||
NetPacketAvatarHeader::Data headerData;
|
||||
tmpPacket.GetData(headerData);
|
||||
|
||||
if (headerData.avatarFileSize && headerData.avatarFileSize <= MAX_AVATAR_FILE_SIZE)
|
||||
if (headerData.avatarFileSize >= MIN_AVATAR_FILE_SIZE && headerData.avatarFileSize <= MAX_AVATAR_FILE_SIZE)
|
||||
{
|
||||
boost::shared_ptr<AvatarData> tmpAvatarData(new AvatarData);
|
||||
tmpAvatarData->fileData.reserve(headerData.avatarFileSize);
|
||||
|
||||
Reference in New Issue
Block a user