Uploaded image in the Pluribus thread

Continuing the discussion from Pluribus (New Vince Gilligan show on AppleTV):

It looks like that image “https://boards.straightdope.com/uploads/short-url/6syxF52b7EjKny9emsRohg6cjLi.jpeg” was somehow uploaded by the the user (@Biffster )
But uploading images is disabled (I tried in the test thread and received the usual message)
So, may be a temporal glitch or misconfiguration?

Uploaded image in the Pluribus thread - About This Message Board - Straight Dope Message Board - December 29 @ 10-23-35 AM@2x|690x293

Whoa, weird!

Turns out you actually can upload here, you just can’t embed the upload… but if you paste the image into the text box, wait for it to finish, and then remove the exclamation mark from the beginning, it works.

If the original upload is:

![Uploaded image in the Pluribus thread - About This Message Board - Straight Dope Message Board -  December 29 @ 10-23-35 AM@2x|690x293](upload://a2dZuVuXpN6mKF9ecOtdOzG8oZd.jpeg)

Just remove the ! at the very beginning:

[Uploaded image in the Pluribus thread - About This Message Board - Straight Dope Message Board -  December 29 @ 10-23-35 AM@2x|690x293](upload://a2dZuVuXpN6mKF9ecOtdOzG8oZd.jpeg)

And then it works…

Did it always work like that, or was this a recent change/bug? How bizarre!

Maybe it’s related to this Discourse issue: Users not in Embedded media post allowed groups can bypass upload restriction by copying the uploaded image link - Bug - Discourse Meta

I think we better not exploit this, we don’t want to fill the server’s (possibly very small) storage space with pictures of cats…

If this is an existing bug and not a new issue, I think this means that every attempted upload over the years is already in our storage bucket — they would’ve gotten uploaded as soon as you added the image, even if the system subsequently denied the embedding.

I agree that this is probably not something we should use or rely on. It’s probably not meant to be this way. I’ve reported it over at the Discourse meta forum too.

test pic

It does work. Doesn’t show the image, though, so seems to be of somewhat limited use

It’s not embedded but it’s there, you can see it if you click on it.

And Google shows a bunch of (presumably failed) uploads to the SDMB, namely PDFs:

Or if you just take the URL and paste it without the Markdown code, Discourse will auto-display the linked image (technically this is subtly different from a real “embedding”, but the end result is the same):

e.g.

This is almost certainly not intentional.

Yep, with that 2 step dance we could upload images and embed them.
But I repeat: we better not start doing this for all images or we may end up killing the SDMB.

Another data point - initially I got an error message saying there’s a 5 megapixel limit. I had to reduce the photo size to make it work.

Moderator Note

User image uploads are supposed to be disabled here. If you have found a way to get around the software and do it anyways, please DO NOT DO IT.

Host your images elsewhere. The SDMB is not intended to be an image hosting site.

I hope you lit the bat-signal to the administration tonhave them lock down that loophole.