Not familiar with the wordfilter, so I'll use regex, but would something like this be possible for now?

RULE
CHECK pm
MATCH {php|png|jpg|jpeg|gif}\?.\>
PRECISION 100%
WORDPOSITION part
ACTION log replace
RULEEND

Be possible?

Yea we totally need images and HTML in mass messages and PMs instead of taking care of a blatant security risk.

The **** is wrong with you people? Just remove them altogether.

images are really useful on era since there are hundreds of different hats and most people don't know what they all look like..i know of people who massed perverted images/videos and i also know by fact that they were banned and reset so people don't really do that anymore xD
a viable option would be to disable clicking on the images, allowing players to simply view them

X_X Viewing the images is what causes the issue, bloodykiller.

u should be able to take images off it u wanted to, but why should graal regress like this? images were used by a lot of players

Yay, everyone ignores my solution that can totally be scripted in!

I don't imagine the servers can take the extra stress of being an image host as well.

It can't be scripted in except with login scripts.

They certainly could but to me it's more why waste the bandwidth?

And then everyone in their right mind disables them as to not be exploited.

It was in response to FP4's "Unless Stefan can script it into the PM system..."

And the servers can totally take the stress of being an image host, it's practically nothing compared to all the other images/ganis/bytecode/levels it serves, especially because of their infrequent use.

And why "waste" the bandwidth? Well, because it's a solution that works and doesn't restrict the users.

^^^

Only If there was like an approval system for any masses with <img> tags :(

Too bad that's also very inefficient.

What are you trying to accomplish? The extension is unimportant. Only the Content-Type header matters. Even without a proper image content-type header, the browser is still going to try to load it, and I still get your IP. The best solution to disable images is Jer's:

As far as I know, the wordfilter rules aren't advanced enough to allow certain text to be exempted (to create a whitelist). This would have to be done with login scripts or by Stefan.

It's not just images.. Basically what they are doing is using an image, or any other file.. on ther website so that when you open a PM and it loads the file from there server.. they have our IP address and becasue of #a they have your account name.. they can match who is who..

you can safely do a read history before you open your pm's if your seriously paranoid about it.. images just happen to be the easiest way to accomplish it.

I think personally, it should be hard coded into graal to only allow images from the server your on because it helps people when selling items to show what they look like.


Someone correct me if I am wrong, but isn't it possible in GS2 to check pm's? I thought GK has a swear filter for that.. and if it is possible, a script could simply phrase for "<img" and warn user that a potential harm may be detected..?

Kingdoms uses the standard swearfilter to filter PMs. I don't think it's possible for scripts to view/modify PMs (for good reason, too). Privileged (login) scripts may be able to, but I don't think so. PMs are displayed using special GUI controls (not just standard GuiMLTextCtrls) which prohibit accessing or changing the displayed message.