Ok so this avatar thing has gone too far. I even put a limit on how but the files could be and still they upload. So I am removing the upload functionality for now.
It will return one day but it will be based on an approval system.
Thanks for destrying it for everyone.