I may have misunderstood the system but it seems as though the connector is not authenticated - surely anyone could then read/post files by sending xml calls?
How can you then discriminate between different users? Why not use xml-rpc or a protocol with authentication?
Just some thoughts.
How can you then discriminate between different users? Why not use xml-rpc or a protocol with authentication?
Just some thoughts.
RE: filemanager connector authentication
if(!Request.IsAuthenticated) {
Response.Write("Access Denied");
return;
}
It's minimalist but it's something.
RE: filemanager connector authentication
RE: filemanager connector authentication
What about this one?
I've just run into the problem ( I mean I would be really happy to use authentication here )
RE: filemanager connector authentication
I realised after posting this that the XML requests from the filemanager etc... are called with the same session as any request from the browser. Apologies.
XML-RPC might make it easier to extend the filemanager etc. though.