[#2766] Image Uploads

We are getting (provocative) images uploaded through the CB upload system, but in the db they are not associated with any userID. We get the image pending system email notification:

A user has submitted an image for approval. Please log in and take the appropriate action.

NOTE: This email was automatically generated from www.domain-name.com ( www.domain-name.com ).

But when we log in as an admin on the front-end, there is nothing pending in the CB workflows module (No Pending Actions). However, the images do appear in the images/comprofiler folder, such as:

0_4e70cbd37524d.jpg and tn0_4e70cbd37524d.jpg.

Any idea how these images may be being uploaded?

The user id in the image is 0 so it's happening during the registration process. Are you able to find what user the image belongs to? I don't recommend providing image fields on registration.

That's what I suspected, but there is no registration associated with the image - somehow they are submitting the image without submitting the rest of the registration info. And there is no user associated with the image (we can determine that from the db).

For now, we will remove the image upload from the registration form, but still curious how they are doing it.

Ah, I see. This was actually a problem for the File fieldtype awhile back. What happens is during the registration process if validation is passed it goes ahead and performs the upload, but if registration fails it's not being deleted. I've added a bug ticket as follows for further investigation.

forge.joomlapolis.com/issues/2766