Server Security and the CheckAuthentication() function

I don't have Dreamweaver 8 to check this, but if you post the code generated by Dreamweaver that is responsible for authentication it will be much easier to help you.

Speaking of security it does not seem to make any difference whether I set my folder permissions to 777 or 755, I am still able to use ckfinder to add, edit and delete files on the remote server?

Open config.php and do the following:

1. As Sensa suggested, first thing you have to do is to uncomment code that starts session, change:

//session_start();

<%
' *** Validate request to log in to this site.
MM_LoginAction = Request.ServerVariables("URL")
If Request.QueryString <> "" Then MM_LoginAction = MM_LoginAction + "?" + Server.HTMLEncode(Request.QueryString)
MM_valUsername = CStr(Request.Form("username"))
If MM_valUsername <> "" Then
  Dim MM_fldUserAuthorization
  Dim MM_redirectLoginSuccess
  Dim MM_redirectLoginFailed
  Dim MM_loginSQL
  Dim MM_rsUser
  Dim MM_rsUser_cmd
  
  MM_fldUserAuthorization = ""
  MM_redirectLoginSuccess = "admin_home.asp"
  MM_redirectLoginFailed = "admin_login_again.asp"

  MM_loginSQL = "SELECT admin_user, admin_pass"
  If MM_fldUserAuthorization <> "" Then MM_loginSQL = MM_loginSQL & "," & MM_fldUserAuthorization
  MM_loginSQL = MM_loginSQL & " FROM dbo.site_admin WHERE admin_user = ? AND admin_pass = ?"
  Set MM_rsUser_cmd = Server.CreateObject ("ADODB.Command")
  MM_rsUser_cmd.ActiveConnection = MM_cnPovertyMain_STRING
  MM_rsUser_cmd.CommandText = MM_loginSQL
  MM_rsUser_cmd.Parameters.Append MM_rsUser_cmd.CreateParameter("param1", 200, 1, 50, MM_valUsername) ' adVarChar
  MM_rsUser_cmd.Parameters.Append MM_rsUser_cmd.CreateParameter("param2", 200, 1, 50, Request.Form("password")) ' adVarChar
  MM_rsUser_cmd.Prepared = true
  Set MM_rsUser = MM_rsUser_cmd.Execute

  If Not MM_rsUser.EOF Or Not MM_rsUser.BOF Then 
    ' username and password match - this is a valid user
    Session("MM_Username") = MM_valUsername
    If (MM_fldUserAuthorization <> "") Then
      Session("MM_UserAuthorization") = CStr(MM_rsUser.Fields.Item(MM_fldUserAuthorization).Value)
    Else
      Session("MM_UserAuthorization") = ""
    End If
    if CStr(Request.QueryString("accessdenied")) <> "" And false Then
      MM_redirectLoginSuccess = Request.QueryString("accessdenied")
    End If
    MM_rsUser.Close
    Response.Redirect(MM_redirectLoginSuccess)
  End If
  MM_rsUser.Close
  Response.Redirect(MM_redirectLoginFailed)
End If
%>

function CheckAuthentication()
   CheckAuthentication = not(IsEmpty( session("MM_Username") ) )
End function

function CheckAuthentication()
{   
   //WARNING : DO NOT simply return "true". By doing so, you are allowing
   //"anyone" to upload and list the files in your server. You must implement
   //some kind of session validation here. Even something very simple as...

   // return isset($_SESSION['IsAuthorized']) && $_SESSION['IsAuthorized'];

   //... where $_SESSION['IsAuthorized'] is set to "true" as soon as the
   //user logs in your system.
   
   return true;
}

Fatal error: Cannot redeclare CheckAuthentication() (previously declared in /mywebsite/ckfinder/config.php:34) in /mywebsite/ckfinder/config.php on line 35

Fatal error: Cannot redeclare CheckAuthentication() (