Connector interpretes parameter wrong

[Michael Osipov]

Fire PHP Connector with:

http://www.fckeditor.net/fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFolders&Type=Image&CurrentFolder=\

Response should be an error because the CurrentFolder does not start with a /

The actual response is:

<Connector command="GetFolders" resourceType="Image">
<CurrentFolder path="/\/" url="/_userfiles/image/\/"/>
<Folders/>
</Connector>

[Wiktor Walc]

Current behaviour of connectors is different to that described in Server Side Integration. If trailing or leading slash is missing, it is appended / prepended to the folder name to make a valid path from it.

Shouldn't this be corrected in documentation?

[Michael Osipov]

I'd correct the PHP implementation. requiring a pre and appended slash makes sense for correctness' sake. Other implementations may suffer too.

I'd not recommend a folder containing a backslash in its name. It is sanitized when creating a folder.

[Wiktor Walc]

All connectors use the same algorithm (different than described in documentation), so let's stick to it in 2.6.

Backslash in folder name is sanitized because it is not allowed in Windows, however it is a valid folder name in linux. So if someone already have a folder with such name, we should allow him to use it.

[Frederico Caldeira Knabben]

I agree with wwalc... all connectors already offer a default behavior regarding the backslash. If it is missing, we simply add them. I've updated ​the documentation for the sake of correctness, but let's remember that our current code base is the most accurate documentation.

There are problems instead by accepting folder names containing "\". I've just did some tests with it over Windows, and the results are unpredictable. We should therefore check the name and not accept it, just like we do today, returning error 102.

[Frederico Caldeira Knabben]

ASP.NET fixed with [1770].

[Wiktor Walc]

Fixed with [1797] (my intention was to split that commit into three parts but I pressed the "OK" button too fast).

Summary:

• In ASP & ColdFusion connectors, SendError() function was missing. It is defined in basexml.ext file which is not included in upload.ext. SendError() is called by GetCurrentFolder().
• Lasso connector didn't check for "..", so it required additional modifications.
• All other connectors (php, perl, python) required very small modifications.

[Wiktor Walc]

Added changelog entry with [1798].

[Wiktor Walc]

Ok, I'm closing this one.

I have created a separate ticket for Java connector: #2053.