As we all know, many forums allow users to set profile pictures, post images, or put images in signatures.
Could a user create an
img tag that points to their own site with a link that no one would type in (example.com/placeholder/ping/ip/holder/record.php) and just record the ip address of every client that loaded the picture?
Is there any protection against this in web browsers? Is there any way to prevent this except by forcing all images on a website to be hosted by the site?