Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsFCKeditorFCKeditorHack FCKeditor to upload images (even when NoGallery Toolbar for Role)Hack FCKeditor to upload images (even when NoGallery Toolbar for Role)
Previous
 
Next
New Post
2/6/2008 11:53 PM
 

I found a hack to be able to browse server / upload documents in FCKEditor in combimation with the DNN forum (but it would also apply to Blog and other modules using the FCKEditor as well).

  1. Login as Admin
  2. Create a DNN Forum, and start a new Thread.
  3. Use "Show custom editor options" of FCKEditor.
  4. Configure the instance so that a role (such as UnAuthenticated Users) only have access to the "No Gallery" toolbar (so the image/flash chooser doesn't show for this role or roles).
  5. Save configuration for the instance.
  6. Logout.
  7. Goto Forum.
  8. Post a new Thread
  9. Notice there is NO image / flash chooser, but there IS the emoticon option.  Insert a simple emoticon.
  10. Right click on the newly inserted emoticon.
  11. Choose Image Properties.
  12. Browse the server, upload files, do as you wish.... 
  13. Congratulations.

Of course, this only works IF the role ALSO has been permitted upload capabilities of the root folder where FCKEditor instance is pointed... but still something to consider.  You can see the problems here if you dig a little bit.  Best case scenario is to ONLY allow the "Basic" toolbar for any role that you don't really trust.

 
New Post
2/6/2008 11:58 PM
 

Here's an even better one, you can even browse server with BASIC TOOLBAR (not allowing any images or anything):

  1. Login as Admin
  2. Create a DNN Forum, and start a new Thread.
  3. Use "Show custom editor options" of FCKEditor.
  4. Configure the instance so that a role (such as UnAuthenticated Users) only have access to the "BASIC" toolbar (so almost nothing show for this role or roles except Bold, Italic, etc).
  5. Save configuration for the instance.
  6. Logout.
  7. Goto Forum.
  8. Post a new Thread
  9. Notice there is NO image / flash chooser, no spell check, nothing but Bold, Italic, etc. 
  10. Open another browser window and goto:  http://www.google.com
  11. Highligh the Image "Google" next to the search box.
  12. Copy.
  13. Go back to the Forum posting (FCKEditor).
  14. Paste.
  15. Right click the newly pasted image.
  16. Choose Image Properties.
  17. Browse the server, upload files, do as you wish.... 
  18. Congratulations.
 
New Post
2/7/2008 12:04 AM
 

The only way that I can tell to ensure that the users can't browse the server at all is to do this:

  1. Create a sub-folder using Admin > FileManager in your portal root.
  2. Change the permissions so that ONLY Administrators have VIEW access to this folder (don't allow any other roles to have VIEW).
  3. Goto the FCKEditor instance(s) on your site.
  4. use the "Custom Editor options", and point the default folder to that newly created sub-folder (step 2)
  5. Then, if/when someone tries any of the hacks above, it will open the image properties, but if they hit "Browse Server", it will pull up an empty folder without any upload/browsing capabilities.

 

 
New Post
2/7/2008 12:36 AM
 

I think the most important thing here, is that if you haven't already done so, you should use the Admin > FileManager and make sure any / all folder that you DON'T want people to have access to INVISIBLE and UNWRITABLE to those roles (such as unauthenticated users)... Just to be safe.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsFCKeditorFCKeditorHack FCKeditor to upload images (even when NoGallery Toolbar for Role)Hack FCKeditor to upload images (even when NoGallery Toolbar for Role)


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out