Tighten ACP forum actions and avatar handling

app/Http/Controllers/ForumController.php

@@ -68,7 +68,12 @@ class ForumController extends Controller
             }
         }
 
-        $position = Forum::where('parent_id', $parentId)->max('position');
+        if ($parentId === null) {
+            Forum::whereNull('parent_id')->increment('position');
+            $position = 0;
+        } else {
+            $position = Forum::where('parent_id', $parentId)->max('position');
+        }
 
         $forum = Forum::create([
             'name' => $data['name'],

app/Http/Controllers/UploadController.php

@@ -16,7 +16,13 @@ class UploadController extends Controller
         }
 
         $data = $request->validate([
-            'file' => ['required', 'image', 'mimes:jpg,jpeg,png,gif,webp', 'max:2048'],
+            'file' => [
+                'required',
+                'image',
+                'mimes:jpg,jpeg,png,gif,webp',
+                'max:2048',
+                'dimensions:max_width=150,max_height=150',
+            ],
         ]);
 
         if ($user->avatar_path) {