We are getting (provocative) images uploaded through the CB upload system, but in the db they are not associated with any userID. We get the image pending system email notification:

A user has submitted an image for approval. Please log in and take the appropriate action.

NOTE: This email was automatically generated from www.domain-name.com (www.domain-name.com).

But when we log in as an admin on the front-end, there is nothing pending in the CB workflows module (No Pending Actions). However, the images do appear in the images/comprofiler folder, such as:

0_4e70cbd37524d.jpg and tn0_4e70cbd37524d.jpg.

Any idea how these images may be being uploaded?

That's what I suspected, but there is no registration associated with the image - somehow they are submitting the image without submitting the rest of the registration info. And there is no user associated with the image (we can determine that from the db).

For now, we will remove the image upload from the registration form, but still curious how they are doing it.