fckeditor-trac  

[FCKeditor-Trac] [SPAM] Re: [FCKeditor Dev] #2875: FCKConfig.BasePath should be root relative not absolute to URL

fckeditor-trac
Thu, 05 Feb 2009 02:39:59 -0800

#2875: FCKConfig.BasePath should be root relative not absolute to URL
---------------------+------------------------------------------------------
 Reporter:  brooky   |       Owner:     
     Type:  Bug      |      Status:  new
 Priority:  Normal   |   Milestone:     
Component:  General  |     Version:     
 Keywords:           |  
---------------------+------------------------------------------------------
Changes (by wwalc):

  * owner:  brooky =>
  * status:  assigned => new


Old description:

> This is not STRICTLY a bug but a concern for compatibility with a great
> deal of FCKEditor users with some of the main stream hosting companies
> like HostGator. I think it needs addressing so that more people can use
> FCK without problems...
>
> su_hosen or mod_security may not allow get variable to have absolute
> paths.
>
> e.g.
> http://www.example.com/editor/filemanager/browser/default/browser.html?Type=uploads&Connector=http%3A%2F%2Fwww.example.com%2Feditor%2Ffilemanager%2Fconnectors%2Fphp%2Fconnector.php
>
> This may throw a 403 permission denied error.
>
> The following example won't:
> http://www.example.com/editor/filemanager/browser/default/browser.html?Type=uploads&Connector=%2Feditor%2Ffilemanager%2Fconnectors%2Fphp%2Fconnector.php
> %2Foffice.devellion.com%3A7001%2Fcubecart%2Fadmin%2Fincludes%2Frte%2Feditor%2Ffilemanager%2Fconnectors%2Fphp%2Fconnector.php
>
> So to fix this the value of "FCKConfig.BasePath" should be root relative
> instead of absolute.
>
> Current value for our example;
> FCKConfig.BasePath = http://www.example.com/editor
>
> should be;
> FCKConfig.BasePath = /editor

New description:

 This is not STRICTLY a bug but a concern for compatibility with a great
 deal of FCKEditor users with some of the main stream hosting companies
 like HostGator. I think it needs addressing so that more people can use
 FCK without problems...

 su_hosen or mod_security may not allow get variable to have absolute
 paths.

 e.g.
 
http://www.example.com/editor/filemanager/browser/default/browser.html?Type=uploads&Connector=http%3A%2F%2Fwww.example.com%2Feditor%2Ffilemanager%2Fconnectors%2Fphp%2Fconnector.php

 This may throw a 403 permission denied error.

 The following example won't:
 
http://www.example.com/editor/filemanager/browser/default/browser.html?Type=uploads&Connector=%2Feditor%2Ffilemanager%2Fconnectors%2Fphp%2Fconnector.php

 So to fix this the value of "FCKConfig.BasePath" should be root relative
 instead of absolute.

 Current value for our example;
 FCKConfig.BasePath = http://www.example.com/editor

 should be;
 FCKConfig.BasePath = /editor

--

-- 
Ticket URL: <http://dev.fckeditor.net/ticket/2875#comment:3>
FCKeditor <http://www.fckeditor.net/>
The text editor for Internet
------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
FCKeditor-Trac mailing list
FCKeditor-Trac@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fckeditor-trac