Opened 18 years ago
Closed 14 years ago
#686 closed Bug (expired)
FCKeditor.Net: UserFilesPath
| Reported by: | anonymous | Owned by: | |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | Server : ASP.Net | Version: | |
| Keywords: | SF Discussion | Cc: | Frederico Caldeira Knabben |
Description
in "FileWorkerBase.cs" -> "UserFilesPath" property there is a mistake in order to determine which of "sUserFilesPath" variable will be set. Watch this:
[original code]
...
...
// Otherwise use the default value.
if ( sUserFilesPath == null || sUserFilesPath.Length
== 0 )
sUserFilesPath = DEFAULT_USER_FILES_PATH ;
// Try to get from the URL.
if ( sUserFilesPath == null || sUserFilesPath.Length
== 0 )
{
sUserFilesPath = Request.QueryString
["ServerPath"] ;
}
...
spotted? "Try to get from the URL." never works.
[new code]
...
...
// Otherwise use the default value.
// Try to get from the URL.
if ( sUserFilesPath == null || sUserFilesPath.Length
== 0 )
{
sUserFilesPath = Request.QueryString
["ServerPath"] ;
}
if ( sUserFilesPath == null || sUserFilesPath.Length
== 0 )
sUserFilesPath = DEFAULT_USER_FILES_PATH ;
...
Greetings, Gürhan Başbuğ.
Moved from SF:
http://sourceforge.net/tracker/index.php?func=detail&aid=1368066&group_id=75348&atid=543653
Change History (5)
comment:1 Changed 18 years ago by
| Cc: | Frederico Caldeira Knabben added |
|---|
comment:2 Changed 18 years ago by
| Reporter: | changed from Martin Kou to anonymous |
|---|
comment:3 Changed 18 years ago by
| Component: | General → Server : ASP.Net |
|---|
comment:4 Changed 18 years ago by
| Keywords: | Discussion added |
|---|
comment:5 Changed 14 years ago by
| Resolution: | → expired |
|---|---|
| Status: | new → closed |
There is a new ASP.NET control available: CKEditor for ASP.NET. The issue is no longer valid as the new control does not have the built-in file browser and the old one is no longer maintained.

Because of security issues, the possibility of passing the UserFilesPath through the URL has been disabled. It is a quite easily hackable feature. We must still decide if it is a good thing to leave this hole opened on FCKeditor.
Moved from SF. Original poster: fredck