ckeditor - does it upload images

Still interested and I agree, not perfect, but a good approach.

The problems that I would forsee with it are the ongoing availability of the $HTTP_SERVER_VARS array, which is deprecated so likely to disappear in future versions of PHP, and the availability of the HTTP_X_FORWARDED_FOR setting, which wasn't available on either our local test servers or the live server we tried it on, and isn't mentioned in the php $_SERVER (replaces $HTTP_SERVER_VARS) documentation.

But if there both available to you, then that's excellent. My judgement would be that the approach would be sufficiently secure that the only hacker able to get around it would need sufficient penetration into your setup already, that access via CKFinder would no longer be an issue.

I was in a bit of a hurry, how about if we change

$IP = $HTTP_SERVER_VARS["HTTP_X_FORWARDED_FOR"]; 

in both files to

    if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) {
        $IP = $_SERVER["HTTP_X_FORWARDED_FOR"];
    }
    else {
        $IP = $_SERVER["REMOTE_ADDR"]; 
    }

will that work on your setup?

Hi,
I would like to use CkFinder but I do not know how to activate it.
I have dwld it to the editor folder, but then, what to do?
Thanks
enzo

How to integrate CKFinder in CKeditor?

Can anyone explain with few steps?

:sleep1:

Hi all,

There's an open source/non-commercial option to CKFind and it's called KCFinder (kcfinder.sunhater.com). I've been working on adding this to CKEditor since I believe customers really need this feature in their system specially to upload additional images to a product.

I'm stuck right now on an issue I'm having. I'm dealing with a coder friend (he doesn't work ZC) to see if he can figure it out, if not I'll let you know but you savvy ZC coders can take a look into this and probably make the integration.

I believe that is a secure system because have different options to avoid hacks (but I'm not an expert on that area of course).

CKFinder also has a range of ways to integrate into a host app. However, it's still a 3rd party app trying to get into Zen Cart from a browser and Zen Cart is very good at protecting itself from being thus penetrated. I'm afraid you won't find an easy way in (which is why nlinksolution's post remains unanswered).

Oh, actually is done already. :yes:

Excellent. There are an awful lot of people who will be grateful for a secure way to upload images from a browser. That's proven extremely difficult up until now because of the ease with which such arrangements can be hacked. Looking forward to seeing your solution.

Any updates on uploading images securely from CKEditor? This is driving a few folks here at our business crazy, as they used to do it in fckeditor. Thank you.

Any updates on uploading images securely from CKEditor? This is driving a few folks here at our business crazy, as they used to do it in fckeditor. Thank you.
I haven't released it because there's a bug that I don't find how to get rid of it. If any coder wants to pitch in, is welcomed.

Is there any other way to upload images while editing a product from the admin?

ideasgirl:

Hi all,

There's an open source/non-commercial option to CKFind and it's called KCFinder (kcfinder.sunhater.com). I've been working on adding this to CKEditor since I believe customers really need this feature in their system specially to upload additional images to a product.

I'm stuck right now on an issue I'm having. I'm dealing with a coder friend (he doesn't work ZC) to see if he can figure it out, if not I'll let you know but you savvy ZC coders can take a look into this and probably make the integration.

I believe that is a secure system because have different options to avoid hacks (but I'm not an expert on that area of course).

Here is kcfinder integrated with ckeditor. works, can upload images in ckeditor for v1.5x.

KCFinder directory comes with no security but renaming it (instructions included) works until i have something better.

vandiermen:

Here is kcfinder integrated with ckeditor. works, can upload images in ckeditor for v1.5x.

KCFinder directory comes with no security but renaming it (instructions included) works until i have something better.

@vandiermen Thanks for this - just was I was looking for! Client will be happy :>

Now just need to make a way to add another level of security....

I often upload images thru a 'dummy' product.
Create a 'dummy' product called "Upload" -> set it to off position - upload images in this 'dummy' product.

The URL to the uploaded images (if uploaded to main-directory) is ../images/YOUR_IMAGE_NAME.
Type this in the URL name from your editor,.. CKE or FCK or HTML editor,... easy!!! Safe!!!

Have anyone worked on kcfinder security? Is there any way to make kcfinder secure?