Support Thread for CKEditor Plugin

Ajeh:

I am assuming you were trying to load this one?
http://www.zen-cart.com/downloads.php?do=file&id=1098

Very odd that some have issues ... :huh:

Yah- that's the one. I did do a file compare with what I downloaded from ckeditor.com and the ckeditor folder included in the PlugIn. There were differences, though I didn't take time to figure out what they were or why. Just assumed corruption somewhere. Perhaps it was in the download process, since it installed fine for you. Or - I did move the files to another computer with DropBox - maybe DropBox "dropped" some files. :)

Ajeh:

I just downloaded from the add on Plugins and installed it without a hitch ... works fine the first time ... :smile:
Could of been I tried to overwrite what was there from a previous install but either way the good news is I found a way to make it work :-)

Hi

Not sure if this is the correct place to ask!

I have zencart 1.5.1 and the standard "green" template plus the CKeditor add in

Anyway my problem is that I inserted a video using the CKeditor iframe button and the video autoplays! I do not want autoplay...
I tried to stop the autoplay with Autoplay = "0" and with Autoplay = "False" but it still autoplays; mycode is

I have a number of Youtube videos which do not autoplay although the code looks similar?, Example code,

Any suggestions welcomed.

Thanks

I noticed the lastest update i sstripping js, any fix?

Greetings All,

I have read about the security issues associated with using 3rd party file upload plugins such as CKFinder and understand that ZC security doesn't allow access to the admin user's sessions to validate.

However, if I were to move the "editors" folder (along with CKFinder) under the renamed, htaccess protected "admin" folder, would that help add a layer of security? :unsure:

I'm sure this has been though of, but haven't found any threads related to this question...

What do you think?

Using ZC v1.5.3 with latest CKEditor (4.4.0) plugin.

Thanks!

kwright:

Greetings All,

I have read about the security issues associated with using 3rd party file upload plugins such as CKFinder and understand that ZC security doesn't allow access to the admin user's sessions to validate.

However, if I were to move the "editors" folder (along with CKFinder) under the renamed, htaccess protected "admin" folder, would that help add a layer of security? :unsure:

I'm sure this has been though of, but haven't found any threads related to this question...

What do you think?

Using ZC v1.5.3 with latest CKEditor (4.4.0) plugin.

Thanks!

Well, can say this, if you have no intention of using CKEditor/CKFinder on the customer's side, then I'm thinking (and I make no claims that this is so) that it may be "safer". But, it seems there may be multiple locations in which a change would be necessary to allow this to work, some of which I think would require pointing to your admin folder... which well, that would reduce the safety that was just attempted to be increased. Currently there is nothing on the store side that actually points to the admin side and moving the folder location to the admin area and maintaining the general current coding would in fact expose the admin folder name unless there was a lot of rewriting performed to move the areas that use/call the code to an admin side only interface.

marton_1:

Hi

Not sure if this is the correct place to ask!

I have zencart 1.5.1 and the standard "green" template plus the CKeditor add in

Anyway my problem is that I inserted a video using the CKeditor iframe button and the video autoplays! I do not want autoplay...
I tried to stop the autoplay with Autoplay = "0" and with Autoplay = "False" but it still autoplays; mycode is

<p> <iframe align="middle" frameborder="0" height="224" scrolling="no" src="http://www.simmar.ch/catalog/images/henandson.mp4" width="400"></iframe></p>

I have a number of Youtube videos which do not autoplay although the code looks similar?, Example code,

<p> <iframe allowfullscreen="" frameborder="0" height="180" src="//www.youtube.com/embed/Vc_r2BTfgPQ?feature=player_detailpage" width="320"></iframe></p>

Any suggestions welcomed.

Thanks

Based on the difference of source for the video and perhaps the player that is loaded, that the issue is not so much the iframe but just that, the player loaded and the source being used. Difference of an mp4 file versus the player that is provided through youtube in this example... Does the same effect occur if you insert the video under some other method? What about a clickable link to the video, say take a snap shot of the first frame and then require clicking on it to see the rest?

mc12345678:

Well, can say this, if you have no intention of using CKEditor/CKFinder on the customer's side, then I'm thinking (and I make no claims that this is so) that it may be "safer". But, it seems there may be multiple locations in which a change would be necessary to allow this to work, some of which I think would require pointing to your admin folder... which well, that would reduce the safety that was just attempted to be increased. Currently there is nothing on the store side that actually points to the admin side and moving the folder location to the admin area and maintaining the general current coding would in fact expose the admin folder name unless there was a lot of rewriting performed to move the areas that use/call the code to an admin side only interface.

Thanks for your input mc12345678,

Editor will not be used by customer, so no issues there. I did a test run and moved the renamed the editors folder with CKEditor and CKFinder under the renamed admin folder. The 3 files that needed to be updated with the new folder locations are on the admin side (init_html_editor.php, ckeditor.php and header.php). So I should be good there. CKEditor and CKFinder seem to be working on localhost for now. Will need to upload to server to see how CKEditor and CKFinder will play with the htaccess protected admin folder.

I'll post back once I have tested! :D

kwright:

Thanks for your input mc12345678,

Editor will not be used by customer, so no issues there. I did a test run and moved the renamed the editors folder with CKEditor and CKFinder under the renamed admin folder. The 3 files that needed to be updated with the new folder locations are on the admin side (init_html_editor.php, ckeditor.php and header.php). So I should be good there. CKEditor and CKFinder seem to be working on localhost for now. Will need to upload to server to see how CKEditor and CKFinder will play with the htaccess protected admin folder.

I'll post back once I have tested! :D

OK, tested on remote server and all seems to be working! :clap:

ShopVille:

I noticed the lastest update i sstripping js, any fix?

Bump? oops message is too short...

ShopVille:

Bump? oops message is too short...

That is default CKEditor behaviour, it strips anything that is not html

Design75:

That is default CKEditor behaviour, it strips anything that is not html

Any fix or alternative?
(older version didn't do that?!)

ShopVille:

Any fix or alternative?
(older version didn't do that?!)

I don't know.You may want to check the CKeditor site

ShopVille:

ShopVille:

I noticed the lastest update i sstripping js, any fix?
Bump?
Not sure I understand what it is you're trying to do.

By "older version didn't", which specific older version are you referring to exactly?

ShopVille:

I noticed the lastest update i sstripping js, any fix?

For anyone searching for the solution this worked for me add the following line

config.extraAllowedContent = 'p(*)[*]{*};div[id]';

To
/editors/ckeditor/config.js

My config.js file looks like this:

/**
 * @license Copyright (c) 2003-2013, CKSource - Frederico Knabben. All rights reserved.
 * For licensing, see LICENSE.html or http://ckeditor.com/license
 */

CKEDITOR.editorConfig = function( config ) {
         config.extraAllowedContent = 'p(*)[*]{*};div[id]';
	// Define changes to default configuration here. For example:
	// config.language = 'fr';
	// config.uiColor = '#AADC6E';
};

ShopVille:

For anyone searching for the solution this worked for me add the following line

config.extraAllowedContent = 'p()
[]{*};div[id]';

> To 
> /editors/ckeditor/config.js
> 
> My config.js file looks like this:
> ```
/**
 * @license Copyright (c) 2003-2013, CKSource - Frederico Knabben. All rights reserved.
 * For licensing, see LICENSE.html or http://ckeditor.com/license
 */

CKEDITOR.editorConfig = function( config ) {
         config.extraAllowedContent = 'p(*)
[*]{*};div[id]';
    // Define changes to default configuration here. For example:
    // config.language = 'fr';
    // config.uiColor = '#AADC6E';
};

DrByte has posted an updated version, available here: http://www.zen-cart.com/downloads.php?do=file&id=1098

frank18:

DrByte has posted an updated version, available here: http://www.zen-cart.com/downloads.php?do=file&id=1098

Does it address this issue?

Hi All,

I'm thinking this is a simple fix, I just don't know where to look. I have ckeditor on several sites, all have the same issue. But the site I'm working on now is a fresh install of ZC154. I have added (in this order):
• Backup mySQL
• Template
• ckeditor
• IH4
• colorbox

HERE IS THE PROBLEM:
When editing a page in ck, images show as broken links, though they look fine on the store.

If I look at SOURCE and then add "http://mysite.com/", the image shows up fine. So it's just when it looks for an image that is relative (not specifically mapped). My stores are all contained on mysite.com, not mysite.com/store.

Anybody know how to fix this?

Thanks!

try adding a / in front of the relative path.
So it becomes something like /images/your_mage.jpg

Yaaaay Design75!

:clap::clap::clap:

Man, how dumb!!! Thank you!