I cross posted that to http://cksource.com/forums/viewtopic.php?f=10&t=19020

CKFinder is not working anymore with Drupal 6.17 release. In the release, the behaviour of cookie_domain was changed as described here:

http://drupal.org/node/458704

No matter what I set for cookie_domain in settings.php, CKFinder refuses to start because of "possible security problems".

Comments

advseb’s picture

advseb CreditAttribution: advseb commented

By the way, if I roll back the change done in http://drupal.org/node/458704, CKFinder works again.

Damien Tournoud’s picture

Damien Tournoud CreditAttribution: Damien Tournoud commented

Check your base URL settings and your cookie path settings. You probably have a discrepancy somewhere.

Gábor Hojtsy’s picture

Gábor Hojtsy
he/him
Primary language Hungarian
Location Hungary
CreditAttribution: Gábor Hojtsy commented

Uhm, that change was done to not make some changes to the cookie domain automatically. So if you just set your cookie domain to what Drupal was modifying it to in Drupal 6.16 is that still breaking? Why?

advseb’s picture

advseb CreditAttribution: advseb commented
Component: Code » Documentation
Priority: Critical » Normal

Ok, if I set both base_url and cookie_domain it works. Before, I never set base_url.

Could you please update the installation documentation of CKEditor to point out that both base_url and cookie_domain must be set?

Renzy’s picture

Renzy CreditAttribution: Renzy commented

I have also just upgraded to 6.17 and have this same issue, with the CKFinder reporting security issue and not working.

I followed up posters advice and set both base URL and cookie_domain and this did work.

There are quite a few posts about this issue - so does neet to have Documentation updated.

Thanks,
regards - Renaee.

wwalc’s picture

wwalc CreditAttribution: wwalc commented

Thanks for reporting it. I have updated the documentation, however it's a pitty that it sudddenly stopped working. Leaving as opened to check it again in 6.18.

pat_bee’s picture

pat_bee CreditAttribution: pat_bee commented

Hope this helps, what fixed this after upgrade for me was going into
Admin / Settings / CKEditor / Global Settings / Advanced Settings
the changing "Path to CKEditor" to just %m
that made it reappear but oddly enough when I went back to check that setting it had reverted back to
%m/ckeditor

Can't say I know why this worked but it did for me.
Let me know if this helps?

FatherShawn’s picture

FatherShawn
Primary language English
Location New York
CreditAttribution: FatherShawn commented

I have not set base_url but I did put a leading . before the domain, as in $cookie_domain = '.example.com'; which also fixed intermittent login problems. CKFinder is working fine for me.

FatherShawn’s picture

FatherShawn
Primary language English
Location New York
CreditAttribution: FatherShawn commented
Status: Active » Closed (fixed)

Leading . Still works in Drupal 6.19

dark_kz’s picture

dark_kz CreditAttribution: dark_kz commented

It doesn't work for me.
I put "." before my domain, and I can't login into Drupal admin
cookies are cleaned