Private dir per user

Hi,

I use CKEditor with CKFinder.
Each user on my application has his own subdir in public_html

I want each user to give the ability to upload to his own private dir, not be able to see, modi, del or whatever images from other users.

currently I use :

filebrowserImageBrowseUrl : '/ckfinder/ckfinder.html?Type=Images&rlf=0&start=Images:/voddeke/files',
filebrowserImageUploadUrl : '/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Images&currentFolder=/voddeke/files/',

where /voddeke/ is the private dir of one of my custommers.

Upload seems to be OK, goes in the right dir, but while browsing , the can go up to other dirs and see others files, which is not my intention.

What can I do, so that each cust can only browse, upload, etc his own files in his own dir ?

Thanks for helping, Paul.

Fri, 02/12/2010 - 15:28

alfonsoml

Joined: 31/12/2006

Posts: 3737

Re: Private dir per user

In the config.php file you must set the BaseUrl so it points to the proper url for each user. That way they'll start in their own directory and can't browse outside it.

Wed, 02/15/2012 - 18:18

dmendell

Joined: 15/02/2012

Posts: 1

Re: Private dir per user

I am not sure this is the right answer....

The PHP file seems to just control the uploads but not the file browsing.

How do you set the javascript so a user see only his own directory of files under a public directory?

The PHP $BaseURL does not get read by the javascript... I think.

Wed, 02/15/2012 - 18:54

wiktor

Joined: 16/07/2007

Posts: 1641

Re: Private dir per user

Alfonso is right. I assume that you have some kind of authentication in your site. E.g.

if (password_is_valid()) {
  $_SESSION['loggedin'] = true;
  $_SESSION['username'] = 'Joe';
}

The authentication is probably based on session variables. All you need is session_start(); in the configuration file and constructing baseUrl/baseDir variables using the username that is hopefully stored somewhere in the session variables.

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+