Hi , I just tried to add (attach) a small jpg in a private message. The error was: jpg files are not allowed. I converted to a png and got the message png files are not allowed. Both were done using the attach browse on the bottom of the panel.

Trying to do the same thing from the attach file icon resulted in the same error message.

Note that GimpChat will upload the file without errors but will not allow to put it in the message.

Am I doing something wrong here? Filesize is less than 1000kB (127kB)
I circumvented by using a link to imageshack.

Cheers wbool63

I think that attachments in messages are turned off globally by Administration.

Any particular reason why?

I do not know.

I don't think they are shut off for any reason. It looks like an oversight. I'll go in and look but I may need to have GnuTux fix it.

Hm, everywhere I look it says they're allowed in Private Messages but I can't get them to work either. I've left a pm for GnuTux to look into the matter.

I remember this happening to me a while ago while I was trying to PM someone an image, and I was confused,then just threw it on Imageshack and moved on.

Well, we really don't want to encourage peeps to share files in private on Gimp Chat, for obvious reasons. Of course, you can get around that by uploading directly and sending someone a link. I do monitor uploads for inappropriate files and copyrighted material.

My view is that uploads and attachments should be out in the open for all to see.

I agree, GnuTux. That way some malware-toting jerk can't join and send pm's with malware attached. It's a protective device for our members.

Thanks for clearing it up Tux.

Is there a way to tell people before they try to upload? I remember struggling with the same thing a while ago.

It's your site, you have that control and I understand why you would prefer it that way, all things considered.

Unfortunately, I disagree with your view that everything should be made public, on the contrary, some things aren't "everyone's" business if the person sharing doesn't want it to be. Why else have "Friends" and "Foes", or any other type of categorization that dissects the community atmosphere?

This isn't to say I would expect you to reverse your views. More or less, my philosophy is sympathetic to a point, that communal attitudes have a certain amount of latitude, but does not guarantee the publicizing of any thing I wish to be kept private between people of my own choosing.

Gnutux , I respect your position as site owner, but I was not aware that my reading a private message sent by another member would allow the spreading of malware as I do not actually receive the message. I believe the message stays on the server unless I chose to save it on my computer in which case good antivirus practices should stop any threat carried in that message or attachment. However I am probably wrong.

There may be very good reasons to allow private messages with attachments between members. Not all matters need be completely transparent to the whole world and bots to become public domain. I think that protracted private conversations are probably better conducted per private email but this will divulge the email address of the participants and this may not be desirable. I thought that the protection of email addresses is one of the main reasons to implement the "private message" feature on forums and bulletin boards.

If attachments (images or files) are not allowed then this should be reflected in the User Control Panel so that members do not waste time or become frustrated when they cannot upload.

I was not aware that you monitor private messages as a matter of course to inspect for copyrighted material or inappropriate content.
The fact that messages are routinely monitored should be made apparent in the User Control Panel. This would probably stop inappropriate content and copyrighted material.

Just my opinion

Cheers Wbool63

There are no built-in provisions to warn users that attachments are not allowed in PMs but I will look into modifying the board in some some fashion to warn the user or not display the attachment dialogue.


I never said I thought "everything" should be made public. After all, PM's are allowed. Files on the other hand, are a different matter. Pirated music, Malware/viruses or kiddie porn can get me tossed in jail and ruin my life.


Private messages are encrypted. The messages are not monitored. AFAIK, the developers of phpBB do not even provide decryption keys. Yes, I'm sure I could come up with a way to decrypt the messages but I'd just disable PMs before I do that. You can rest assured that PMs on here will never be monitored by anyone. Private means private!!

Files are a totally different matter. See my response above.

That would be great
Maybe instead of an option to upload something, you could have "quick links" to Mediafire, and Imageshack or something that could be set from the UCP (user control panel)

Which is why I said I understand why you do, but unfortunately this throws everyone/everything into the "one bad apple" mode.

But like Jolie and wbool63 stated, we all tried, not knowing we couldn't or why we couldn't.

It's ok with me that you don't permit images in PMs. I still believe that there are people in general, with good intentions, and don't mind sharing my freemail address for purposes requiring privacy. It's just difficult enough as it is to get anyone to be trusting, when the general populace is so focused on the dark side of things.

But it is what it is.

To avoid any future confusion, I've removed the attachment form and the upload button from the PM composition screen. Please let me know if there are any problems with these changes.

Thanks!!

Thanks GnuTux for removing the upload button.

Not to suck up to the admin (not my style), but I totally get where you're coming from by not allowing it. At the end of the day you'll be the one held responsible if some creep has used the PM system here to spread child porn.

That said, I sometimes upload and then before I hit submit I realise it needs another edit, so I upload the edited file again and change the picture. But I can't delete the old one. Do you see all my unfinished work?
Do you play, spot the differences with my "almost the same" uploads?

As an aside and going slightly off topic.
Jolie , I fail to see how Gnutux can be held responsible for content if he does not know the contents of the PM attachments. After all, the Postal Services, Couriers, and for that matter a forum (electronic carrier) cannot be held responsible for content unless they are aware of the contents. Have you ever heard of the US Mail being responsible for a letter bomb? So, if the owner of a forum does not inspect the mail he surely cannot be held responsible, moreover if he inspects the mail is he breaching a privacy act?
When we become members , do we not acknowledge (somewhere in the fine print in the EULA )that we shall not use the forum for offensive or dangerous purposes?
Similarly if I send a parcel, I sign a declaration that the material is not dangerous or offensive!

I really do not know the answers and I am not having a go at you or at Gnutux. I just get the feeling that we are getting too careful about just about every thing for fear of being held responsible for things over which we have almost no control.
Common sense seems to be dying a slow death.

I also feel that this forum is not the type where you would encounter offensive material

NB I have no problems by not being able to use the upload file function , now that I know that it is not allowed.

Cheers Wbool63

Technically, you might be correct but it is a very gray area.

From my research in this matter..


So as you can see, the simple fact that the content is user generated doesn't absolve the website owner from liability.

Lawyers will tell you that liability can sometimes be mitigated as follows..


Basically, you put up a website and walk away, with no moderation of any kind. From my perspective, that is not really an option on a site like this.


As I mentioned before, private messages are not monitored. Matter of fact, the text in PMs is encrypted so even the server host would have to jump through hoops to access private messages. No one is more of a proponent of privacy rights than I am so you can be assured that private messages on here remain private.

The exception is when a Gimp Chat member reports to the staff that they were sent an inappropriate PM (slander, threats, copyright infringement, child porn, etc), it is our legal duty to report the incident to all parties involved or I could be held liable. In that specific case, I would ban the user, reset their password, access their PMs and contact the authorities or other involved parties.

Files are handled differently than text in a PM. If you use the upload button, the file is uploaded as is to a specific folder (/files), with no change in the file name's extension. The upload button is for image file types only. I can easily scan those for inappropriateness.

Attachment filenames are encrypted and are not easily recognizable unless they are attached to a post. They are more properly managed by phpBB and they are flagged as "orphaned" when no longer attached to a specific post. Because the filenames of attachments are encrypted, it makes it pretty much impossible to monitor them when attached to PMs. In the open forums, we can all can see what they are.


That language is in the EULA but that alone doesn't absolve the website from liability.


I tend to agree with you but in America, anyone can be sued at any time for any reason. The cost to defend yourself can destroy your life, even if you are innocent. You might get lucky and get someone like the EFF to defend you pro bono but that probably won't happen.

Bottom line, attachments in PMs are impossible to monitor, which increases my risk of legal liability and my risk of being sued.