Opened 12 years ago

Closed 12 years ago

#747 closed Bug (fixed)

connector doesn't check the file type

Reported by: farshadg@… Owned by: mosipov, th-schwarz
Priority: Must have (possibly next milestone) Milestone: FCKeditor.Java 2.4
Component: Server : Java Version: FCKeditor 2.5.1
Keywords: SF Cc:

Description

When using jsp connector in FCKeditor, I notice that the connector doesn't check the file type during uploading. FCKeditor has the type of image and files to be allowed or denied for uploading in the fckconfig.js. However, since the connector doesn't check the file type, user can upload any type of files in the image and file folders on the server. It seems that this feature works better in php version.


Moved from SF:
http://sourceforge.net/tracker/index.php?func=detail&aid=1510779&group_id=75348&atid=543653

Change History (8)

comment:1 Changed 12 years ago by Martin Kou

Keywords: SF added; Sf removed
Reporter: changed from Martin Kou to farshadg@…

comment:2 Changed 12 years ago by Alfonso Martínez de Lizarrondo

Component: GeneralServer : Java

comment:3 Changed 12 years ago by Michael Osipov

Owner: set to Michael Osipov

I will investigate that!

comment:4 Changed 12 years ago by Michael Osipov

Status: newassigned

comment:5 Changed 12 years ago by Michael Osipov

Milestone: FCKeditor.Java 2.4
Owner: changed from Michael Osipov to Thilo Schwarz
Status: assignednew
Version: FCKeditor 2.5.1

comment:6 Changed 12 years ago by Michael Osipov

Priority: NormalHigh

comment:7 Changed 12 years ago by Michael Osipov

Owner: changed from Thilo Schwarz to mosipov, th-schwarz

I will handle the doPost method (Upload)

comment:8 Changed 12 years ago by Michael Osipov

Resolution: fixed
Status: newclosed

Fixed SVN as stated for Upload.

Note: See TracTickets for help on using tickets.
© 2003 – 2019 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy