Changes to attachments

RiotRiot Soundwave·9/17/2015, 11:15:54 PM·5 votes·4,724 views

Hey guys

From the day we launched the new boards to where we are now, we’ve put a tremendous effort into the stability and safety of the forums. Mostly, improvements in this area go unnoticed (like…the forums not crashing), but every now and then we have to make changes that are a bit more visible. While having many positive applications, uploading files to the boards is sadly also one of our biggest security vulnerabilities, which is why we’re going to remove that option. We’ve tried alternate solutions like limiting attachments to some forums, restricting file types etc but the net result is still the same; it puts our platform at risk.

Obviously, you’ll still be able to post images, link to files which are hosted elsewhere etc, all we’re disabling is uploading files to the platform. Nothing apart from uploading a specific file is affected.

Thanks for your understanding!

If you have any questions related to this change, feel free to post here.

23 Comments

aaronautumn9/17/2015, 11:26:19 PM10 votes

this is an indirect buff to vayne's early game. please reconsider.

Daen9/17/2015, 11:21:58 PM2 votes

I'm curious as to how many people ended up using that functionality anyway, especially when we can embed things like imgur links directly into our posts.

Either way, thanks for letting us know. :)

Jesus is Savior9/18/2015, 2:00:25 AM2 votes

[{quoted}](name=Riot S0undwaves,realm=NA,application-id=bzRrPGQO,discussion-id=xTJ1d3xs,comment-id=,timestamp=2015-09-17T23:15:54.548+0000)

Hey guys

<snip>

How bad are your programmers that allowing images to be uploaded caused "security vulnerabilities"?

Holy shit, hire some real professionals to run the company. You guys have absolutely no idea what you are doing.

Like, I get that you're not an image hosting company, but... It should be pretty basic, no? Images are pretty fundamental to web development/the entire internet.

String of Ears9/18/2015, 6:03:31 AM2 votes

who fucking cares?

Healin9/17/2015, 11:53:53 PM1 votes

Are you sure we can't disable direct uploading of images? I feel like it causes more problems than its worth.

Deep Terror Nami9/18/2015, 5:27:02 AM1 votes

For anyone wanting to post their pictures, you can simply upload it to another site and link that here.

Preferably, you would want to copy the image URL, not the address, and post that (just right click the image and select that). It will automatically embed and show the picture. If I have a picture on my PC I just open it up in MS Paint, select the whole thing and copy it, and paste it to snag.gy, then copy the image URL and paste it as mentioned before.

Some like to put theirs on other sites such as imgur, though that takes more time and effort (unless you already planned on putting it there).

Don't forget, post the image URL, not the web address. The difference is this; https://gyazo.com/bc6cb3b7cc2186956c6a891ef089d39d just the address https://i.gyazo.com/bc6cb3b7cc2186956c6a891ef089d39d.png the image URL

TheLastShadow459/17/2015, 11:22:16 PM1 votes

That means I can't put my Salty pic anymore when people be acting salty.

Rand0mH3r0X9/17/2015, 11:26:55 PM1 votes

I notice these changes. Especially the unnanounced top right drown down menu where my summoner name is. Also, when actively making changes my boards will sometimes switch views on me.

How exactly though, did the uploads affect the platform? Were they just putting a strain on the forums or was the content contaminating something virally?