ASP File Upload - security... now UNC paths (new title)

Thanks A.M.,

My hosting support believes that the problem is due to UNC paths utilized in there load-balanced hosting environment. They were able to get the "test.html" page working correctly by making the following changes in the ia.asp file, but it did not correct it for the production environment of the editor:

---------------------------------------------
I fixed that page you linked to by changing the CombinePaths function in io.asp to:

function CombinePaths( sBasePath, sFolder)
'CombinePaths = RemoveFromEnd( sBasePath, "/" ) & "/" & RemoveFromStart( sFolder, "/" )
Dim sCombinedPath
sCombinedPath = RemoveFromEnd( sBasePath, "/" ) & "\" & RemoveFromStart( sFolder, "/" )
if Right(sCombinedPath, 2) = "\\" then sCombinedPath = Left(sCombinedPath,
Len(sCombinedPath) - 1)
CombinePaths = sCombinedPath

end function
---------------------------------------------

Are there any known fixes for FCKeditor to deal with UNC paths?

Thanks for any thoughts again!

Neo

Thanks for the help on this one.

Ive made the changes that 2063.patch outlines and I get the following error:

--------------------

Microsoft VBScript runtime error '800a01c2'

Wrong number of arguments or invalid property assignment: 'CombineLocalPaths'

/fckeditor/editor/filemanager/connectors/asp/commands.asp, line 178

---------------------

The code looks clean - could this be caused by the NAS being unhappy with the mixed slash ("/","\") environment?

pg

Notes:

Code from commands.asp:

'sFilePath = sServerDir & sFileName
'2008-06-03, FCKeditor 2063.patch from forum.
sFilePath = CombineLocalPaths(sServerDir & sFileName)

Code from io.asp

'2008-06-03, FCKeditor 2063.patch from forum.
function CombineLocalPaths( sBasePath, sFolder )
sFolder = replace(sFolder, "/", "\")
' The RemoveFrom* functions use RegExp, so we must escape the \
CombineLocalPaths = RemoveFromEnd( sBasePath, "\\" ) & "\" & RemoveFromStart( sFolder, "\\" )
end function