Hi everyone,
I’m encountering a strange behavior on my Discourse forum and would like your advice.
Situation:
- There is a user who has never activated their email.
- Their
last_seen_atshows they have never logged in. - Despite this, the user somehow has an uploaded avatar.
What I’ve ruled out:
- I did not manually upload or set the avatar for this user.
- I do not have any SSO / third-party login providers enabled.
- Gravatar is not the cause, as it requires login or active email.
- No unusual plugins related to avatars are currently installed.
- This forum has no bulk import of users with avatars.
Questions:
- How could a user who has never logged in and is inactive end up with an uploaded avatar?
- Are there any known bugs or edge cases in Discourse that could cause this?
- What is the safest way to remove this avatar and prevent this from happening again?
Any insight would be greatly appreciated!
Thanks!