Hi

I have a Drupal 5 installation with FCKEditor which is working really well in an IIS environment but when I move it to an Apache environment I get a 403 Forbidden message whenever I try to Browse the server for uploaded files.

The URL that it is passing is

http://www. ... .au/modules/fckeditor/fckeditor/editor/filemanager/browser/default/browser.html?type=Image&Connector=../../connectors/php/connector.php&ServerPath=/staging/ccs/files

If this is changed to

http://www. ... .au/modules/fckeditor/fckeditor/editor/filemanager/browser/default/browser.html?type=Image&Connector=/filemanager/browser/connectors/php/connector.php&ServerPath=/staging/ccs/files

it works.

Now I have run the code through a script debugger and cannot find where the "../../" is added or where to make teh appropriate changes to the code.

Can anyone help?

cheers
David

Comments

wwalc’s picture

wwalc commented

Sounds like a problem with mod_security module rejecting requests to urls containing "../../".

wwalc’s picture

wwalc commented
Assigned: dkhorne » Unassigned
Priority: Critical » Normal
turcanuandrei’s picture

turcanuandrei commented
Version: 5.x-2.1 » 6.x-1.3-rc1

I have exactly the same error as described here (except that i didn't move from iis to apache and i'm using drupal 6.5) and problem is that i can't change the mod_security settings on the server.
I've alreay browsed the readme and google and it seems as if this has already been an issue before but it should be solved according to this: http://dev.fckeditor.net/ticket/1868
Also i did try changing the fckconfig.js in the fckeditor/fckeditor directory but it seems as if the changes being overriden somehow.

wwalc’s picture

wwalc commented
Status: Active » Fixed

Fixed in CVS. Download the dev release from 2008-Oct-15 (should be available in an hour or after midnight) and let me know if that worked out for you.
I'm marking it as fixed, please reopen if you have any problems with it and also again please drop here a message that it started working for you.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.