...can anyone tell me what happens if I try and upload (for example) a .exe file instead of a JPEG? I'v tried it locally and my 'avatar' reverts to the acid-house-circa-1989 image, but does the .exe file make it through onto the system? Is there any checking for file type in this process?
My sysadmin is asking this before he'll turn GD on to allow custom user images.
Thanks!