Can I find out which member uploaded a profile pic?
 

I found a php file in the customprofilepic folder. It was an exploit that compromised the site. Is there a way to associate a member with that pic? I have searched the database for any reference to that file and found nothing.

I really need help finding out who did this so I can get rid of them.

On the same topic* is there a way to eliminate this from happening again? A way to block all files except picture files.

Thanks