I was reading a blog on the phpBB hack (http://hackedphpbb.blogspot.com/ - is is actually down now) and they stated that they uploaded an avatar which had some code in it (i think it was just listing a directory or something similar). Does anyone have anymore information regarding running code inside images? How would this be prevented? I would like to do some testing with this but cant really find much information on the topic.