@r-a-y
14 years, 9 months ago
Forgot to mention if you’re going with the xprofile field route, you should check the mime-type for the URL.
This would provide some additional security.
DJPaul’s idea is good as well!
