Thanks to everyone for the advice. The problem was indeed, as Glenn English suggested, the "Don't accept graphics from sites other than the one you're talking to" option. Ben