Board Thread:Support Requests - Getting Technical/@comment-24383490-20160306135112

Hello.

The main wiki that I have bureaucrat responsibilities for, VsBattles, has a potential security problem.

Given that the vast majority of currently used profile images are unlocked, vandals could technically change them to anything by uploading images of the same name, but different content, and given the controversial nature of the wiki, I am worried that it is only a matter of time before trolls start to do so, and upload lots of inappropriate pictures, which we will usually not notice, as it won't show up in the edit history.

In order to handle this problem, I think that all currently used profile images should preferably be admin-locked.

If anybody knows of a way to easily do so, or at least of a page that (only) indexes all of the unlocked images that are actually used in our profile pages, this would be extremely useful, as it would give us something to work with.

Thanks in advance for any help. 