Nolan M. (UHEweb) repoted that Recently, while upgrading a site and re-installing envoAvatar, he noticed that the size and width/height functions in envoAvatar did not limit a users ability to upload an image - the upload stated them correctly, but the code failed to do the check and reject it if not.
He proposed the following changes wich did solve the problem.
In the modules/EnvoAvatar/index.php change :

Code

$dimfile=filesize($uploadfile);

to :

Code

$dimfile=$uploadfile['size'];

And a few lines after change :

Code

$array_dim = getimagesize ($uploadfile);

to :

Code

$array_dim = getimagesize ($uploadfile['tmp_name']);

Thanks to him fo this fix.
And the wierd thing is that this problem was already reported, solved, but that I forgot to incorporate the fix in the files on Downloads !! Bad project managment