[OJS 3.x] Misuse of profile image may cause legal action

Feature Requests
8

Would setting public_user_dir_size = 0 prevent admins and editorial teams to upload files?

Yes, it also wouldn’t have any effect on the public user profile image. (see my next post) The controlPublicFiles public only handles files uploaded through the TinyMCE editor.

The following code put into a plugin should block uploads requests for the user’s public profile image:

HookRegistry::register('LoadComponentHandler', function($hookName, $args) {
    $component = $args[0];
    $op = $args[1];

    if ($component === 'tab.user.ProfileTabHandler' && $op === 'uploadProfileImage') {
        Application::get()->getRequest()->getDispatcher()->handle404();
    }
});