Upload doesnt check for ServerPath param like Browser does
|Reported by:||wmswms||Owned by:|
|Priority:||Normal||Milestone:||FCKeditor 2.5 Beta|
We're using PHP for FCK...
Adding a ServerPath param to the Browser URLs works great so we can control what directory that gets browsed. At the same time, we'd like to make the Upload functionality go to the same folder, but it only checks the Config array, and doesnt try to override it with the GET param. Is this a bug, or a security concern? Seems odd that one does it and the other doesnt.