The forum operates in read-only mode. Please head to StackOverflow for support.

Sat, 09/19/2009 - 19:37

gbnetworks.co.uk

Joined: 19/09/2009

Posts: 3

CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

Is there anyone who can explain how to get CKFinder working easily as the auth section is driving me mad!

I don't understand what I need to put/change to made the auth area work.

Please please someone help me as it is driving me mad to get this working.

function CheckAuthentication()
{
//WARNING : DO NOT simply return "true". By doing so, you are allowing
//"anyone" to upload and list the files in your server. You must implement
//some kind of session validation here. Even something very simple as...

// return isset($_SESSION['IsAuthorized']) && $_SESSION['IsAuthorized'];

//... where $_SESSION['IsAuthorized'] is set to "true" as soon as the
//user logs in your system.

((IS THIS RIGHT->)) return isset($_SESSION['CKFinder_UserRole']) && $_SESSION['admin'];

}

Error message:

The file browser is disabled for security reasons. Please contact your system administrator and check the CKFinder configuration file.

Wed, 09/23/2009 - 13:29

wiktor

Joined: 16/07/2007

Posts: 1641

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

To simply enable the connector, add this inside of the CheckAuthentication() function:

return true;

Please note, that as written in comments in the configuration file, you should return "true" only for users that should have access to file uploads.

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+

Mon, 10/05/2009 - 00:43

suncloud

Joined: 05/10/2009

Posts: 2

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

Try to use

session_start();

before

return isset($_SESSION['CKFinder_UserRole']) && $_SESSION['admin'];

Wed, 10/21/2009 - 08:10

marcnyc2001

Joined: 18/10/2009

Posts: 11

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

I have a similar issue.
I have done this:

function CheckAuthentication()
{
   if ( isset($_SESSION['auth']) )
      return true;
   else
      return false;
}

$_SESSION['auth'] is set to something (ie exists) when my user is authenticated and is not set when the user isn't logged in.
It seems to make sense to me but CKFinder keeps returning false and not giving me access.
Can somebody please point me in the right direction?

Wed, 11/04/2009 - 10:46

wiktor

Joined: 16/07/2007

Posts: 1641

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

When using session variables you should add

session_start();

in config.php

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+

Wed, 11/04/2009 - 22:40

marcnyc2001

Joined: 18/10/2009

Posts: 11

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

That was it! That's the solution! Thank you for posting wiktor!!!

Tue, 11/10/2009 - 06:22

cashie

Joined: 10/11/2009

Posts: 2

Re: CheckAuthentication() function (PHP) - PLEASE PLEASE HELP ME

In the case of CakePHP, that still doesn't work actually.
Cake has a unique session id and the name of the session must be set before session_start() is called on the top of config.php.

You may check out the tutorial I have posted here to get your authentication working.

http://blog.beamstyle.com.hk/?p=170