Hi. NOTE - read whole post before acting so you don't create a security problem in your site
To make the image button inside the FCKEditor let you upload an image directly to the server and into the post as an inline element, you can go to sites>all>modules>fckeditor>fckeditor>editor>filemanager>connectors>php/config.php –
and in that file, on line 30, set $Config['Enabled'] = true ; (default is set to fault). HOWEVER . . .
. . . however, the comments above line 30 say // WARNING: don't just set "$Config['Enabled'] = true ;", you must be sure that only authenticated users can access this file or use some kind of session checking.
Is there a way to do this through the Drupal interface?
Or does this have to be through a modification to the config.php file?
I thought you could use a conditional like
if$user->uid ==1 // 1 being the administrator
{
$Config[‘Enabled’] = true;
}
else
{
$Config[‘Enabled’] = false;
}
but $user isn't even recognized.
Do I have to set $user to global somewhere or is there some other variable I can reference so that only a specific set of uid's or roles will be permitted to do these direct uploads.
Also, why does enabling this type of upload constitute a security risk in comparison to FUpload where I haven't seen that mentioned.
Thanks
