Upload Skins or Avatars?

[Spirix]

Hey,

I was wondering if it would be possible for skins and smilies to be uploaded and have the forum be able to use it?

[Spirix]

Also, I forgot to add will there be an option to allow users to edit certain parts, like the board headers or something. On of my users asked this:
Is there a way to ad stuff to the buttom of the page like a copyright?

[Derek]

Skins can be uploaded, just put them in the templates folder.

Not sure about smilies, I'll have to see how phpBB's system works, it might be possible, or I might have to add something to the multi-forums script.

I'll get back to you on that.

Derek

[Spirix]

Well what I meant was have the option to have other people upload thier own skins.

[Derek]

If I do add that feature, that means other forums would be able to use the skin as well. Is that ok? Not quite sure how I would do it though, since you have to upload lots of files.

[Spirix]

Yes, that would be fine if one uploaded skin was added to all the others. Also I noticed that it created a folder in the public_html. For example the script is installed under domain.com/phpbb/ but then when a new forum is created it creates a folder in the domian.com/(right here) ad not in the domian.com/phpbb/(right here)

Would this cause any problems in the future? Also, maybe it would be possible to create a templates folder for each of the boards that are created.

[Derek]

I think I'll stick with having a shared template folder, because if I made one for each forum, then in order for the site owner to add templates, they would have to upload them to each of the forum's folders. Not sure how I'll do the feature to let them add their own skins, they would probably have to upload a zip file of it, and I'll have to somehow make the script unzip it, which might be hard. I'll look into it.

Derek

[Spirix]

Sounds good. I thought it would be a nice feature to allow board owners the ability to choose which skins they wanted and had the ability to upload them. Good luck with it. Looking foward to future features.

[Derek]

Not sure if I'll add it or not. Adding it would introduce security risks, meaning they could easily upload some php files in the folder as well and run some script to hack you, or other forums. They could very easily gain access to your config file, and possibly the database. So I'll think about this before adding it but now sure if I will add it at this point.

Derek

[Cronos]

let someone mod the own forum? O_O


O_o?
when you mod a forum you have to do some query

-> this is a easy job for every one to hack your forum

download from this site the forum
look into the forum, table, permission and what he need
-> make a mod for this site wich add you in the administrator table
-> upload your mod into a forum
-> welcome, you are a new administrator, just delete / watch / edit the forum you want

if we don't want to remember that he could obtain the ftp password too..

you are sure what you are thinking?
it's a huge risk

[Derek]

Yup it is a very big risk, thats why I'm not sure if I will add it. Someone could easily hack you.

[NightStorm]

I think it'd probably be easier to have a "You want a custom skin? Contact us at this email address and we'll talk it over".
Once you start letting people edit code and upload a buncha stuff, you run the risk of them screwing up someone else's board very easily, and start leaning into the "private phpBB install" option.

[Derek]

Yes, maybe a form in the members area to let them request a skin install, and have a spot for the link to the skin or something, and let the admin decide whether or not to upload it.