Page 1 of 3

Posted: Wed Oct 14, 2009 11:20 pm
by Eddy
I found a security problem for the ajax filemanager, download the cms and read the updated pdf.

Posted: Fri Oct 16, 2009 1:56 am
by Patr100
I uploaded an inserted an image but when I preview the page I get a blank image holder with the red cross where it should be?

Posted: Fri Oct 16, 2009 6:45 am
by Eddy
If you have used pages in folders ( page not in the same directorie as the cms) than the path to the file is not correct.( php include in the WB page )

Do you have this structure on your server?
Look also to the read and write settings (755) or (777) from your folders.

content
jscripts
uploaded
login.php
webbuilder pages.html
webbuilder pages.html
webbuilder pages.html

Posted: Fri Oct 16, 2009 6:58 pm
by Eddy
Its not the webbuilder page what you can edit!

This cms works with the same as the News Writer except that the news page is included with php in your WB page.

The "news.html" page is generated and uploaded in the content folder and on that page you write your content.

-If you read "Edit this page!" in the editor than everything is correct.
-Type your text ,insert your images etc and click update.
-Close the editor and renew (F5) your WB page to see the changes.

Posted: Sun Oct 18, 2009 11:01 pm
by Patr100
Eddy wrote:If you have used pages in folders ( page not in the same directorie as the cms) than the path to the file is not correct.( php include in the WB page )

Do you have this structure on your server?
Look also to the read and write settings (755) or (777) from your folders.

content
jscripts
uploaded
login.php
webbuilder pages.html
webbuilder pages.html
webbuilder pages.html
Yes I have that structure and read /write permission are corrrect.

Posted: Mon Oct 19, 2009 1:14 am
by Eddy
Is the cms and the pages in the root directorie of your site?,if yes than the only problem I can think of are the file permissions.

Look also to the ajaxfilemanager folder permissions.

Posted: Mon Oct 19, 2009 6:23 am
by Juul
Eddy,

Thanks for the tips :wink: , it works!!!!


Juul

Posted: Sat Oct 24, 2009 3:55 pm
by Eddy
In the downloaded zip file is also a folder jscripts ,did you upload that folder to the same directorie as the pages what use the extension.

Do you have this structure on your server?
Look also to the read and write settings (755) or (777) from your folders.

content
jscripts
uploaded
login.php

webbuilder pages.html
webbuilder pages.html
webbuilder pages.html

Posted: Sat Oct 24, 2009 4:52 pm
by Patr100
Eddy wrote:Is the cms and the pages in the root directorie of your site?,if yes than the only problem I can think of are the file permissions.

Look also to the ajaxfilemanager folder permissions.
All the permissions fro all the folders are set to 777 or 755.
When I upload an image it is placed in the uploads folder.

But it's stil not showing up on the page.

-

Posted: Sat Oct 24, 2009 6:29 pm
by Eddy
Are all pages/folders in the root directorie!

1)login and open the news page in the editor
2)upload the image with the ajax file manager.
3)select the image in the filemanager to paste in the news page.(tick the box)
4)close the editor.
5)renew your webbuilder page.

Posted: Sat Oct 24, 2009 7:06 pm
by Patr100
Eddy wrote:Are all pages/folders in the root directorie!

1)login and open the news page in the editor
2)upload the image with the ajax file manager.
3)select the image in the filemanager to paste in the news page.(tick the box)
4)close the editor.
5)renew your webbuilder page.
Yes I already siad they are al in the root folder.
I've already done the above.
I am going to empty everything and try again another time.

Posted: Sat Oct 24, 2009 7:40 pm
by Eddy
Sorry,there is not much to configure if all folders and pages are in the same directorie with the right folder permissions than it should work.

Maybe you need to give the ajax file manager folder read and write permissions?

Posted: Sat Oct 24, 2009 8:27 pm
by Patr100
Eddy wrote:Sorry,there is not much to configure if all folders and pages are in the same directorie with the right folder permissions than it should work.

Maybe you need to give the ajax file manager folder read and write permissions?
What specific folder are you referring to?

Posted: Sat Oct 24, 2009 8:34 pm
by Eddy
The folder from the ajax filemanager.

jscripts\tiny_mce\plugins\ajaxfilemanager

Posted: Sat Oct 24, 2009 8:58 pm
by Patr100
Eddy wrote:The folder from the ajax filemanager.

jscripts\tiny_mce\plugins\ajaxfilemanager
Just checked it its already 755

Posted: Sun Oct 25, 2009 2:45 am
by Eddy
When I upload an image it is placed in the uploads folder.
But it's stil not showing up on the page.
I asume that your webbuilder page have the extension php otherwise I have no idea why it does not work for you :?

Posted: Sun Oct 25, 2009 3:33 am
by Patr100
Yes it is
I can edit/add text no problem but uploaded pics still just appear as placeholder with the red cross.
I'll try again later

-

Re: Can´t see the Tiny mce editor

Posted: Sun Oct 25, 2009 12:16 pm
by Patr100
Ukra wrote:
Is there an alternative to the ftpmanager?

Ulrik

I use Filezilla (its free) jusst google it.

Posted: Sun Oct 25, 2009 2:17 pm
by Eddy
Patr100 wrote:Yes it is
I can edit/add text no problem but uploaded pics still just appear as placeholder with the red cross.
I'll try again later

-
Look in the "page html" from the page with the extension if the path to the image is correct,if yes than it can only a permission problem.

Maybe.....in the uploaded folder are more folders for the content to upload,did you give these folders permissions.

Posted: Sun Oct 25, 2009 6:44 pm
by Patr100
Ok I sorted it.


Eddy wrote:If you have used pages in folders ( page not in the same directorie as the cms) than the path to the file is not correct.( php include in the WB page )

Do you have this structure on your server?
Look also to the read and write settings (755) or (777) from your folders.

content
jscripts
uploaded
login.php
webbuilder pages.html
webbuilder pages.html
webbuilder pages.html




Unless I was missing something the above was slightly misleading
The problem was the actual path to the image was
root/content /uploaded

when the structure was
root/uploaded

I manually moved the uploaded folder to
root/content/uploaded

and it worked.
-

Posted: Sun Oct 25, 2009 7:40 pm
by Eddy
I`am happy you found the problem!
I dont know what is different on your server but it works now and thats importand. :D

But can you now upload images with the filemanager to the uploaded folder?

Posted: Sun Oct 25, 2009 9:00 pm
by Patr100
Eddy wrote:I`am happy you found the problem!
I dont know what is different on your server but it works now and thats importand. :D

But can you now upload images with the filemanager to the uploaded folder?
Hmmm Good question just tried it doesn't like it. :(

"Unable to locate the specific folder: ../../../../uploaded/"


-

Posted: Sun Oct 25, 2009 10:05 pm
by Eddy
Its in config.base.php , if you make changes in this file than make first a copy,I have work many hours to make all files work together and i dont know if everything wil work if you make changes in this file.

\jscripts\tiny_mce\plugins\ajaxfilemanager\inc\config.base.php


CONFIG_SYS_DEFAULT_PATH is the default folder where the files would be uploaded to and it must be a folder under the CONFIG_SYS_ROOT_PATH or the same folder these two paths accept relative path only, don't use absolute path*/ define('CONFIG_SYS_DEFAULT_PATH', '../../../../uploaded/'); //accept relative path only define('CONFIG_SYS_ROOT_PATH', '../../../../uploaded/');

Posted: Sun Oct 25, 2009 10:23 pm
by Patr100
Will have a look

While I'm in config.base.php what about the addiitional security update option?

How do I change the log in details ?

Change false to 1 - I can do that

the userrname and password are obviolsy encrypted so do we just leave that as is?

=

Posted: Sun Oct 25, 2009 10:36 pm
by Eddy
In the pdf is an example.
Change also the password and login name.

Posted: Sun Oct 25, 2009 11:20 pm
by Patr100
Eddy wrote:In the pdf is an example.
Change also the password and login name.
yes but where? They are encrypted inthe file - The password can be changed via the extension but not the login name?

Posted: Sun Oct 25, 2009 11:28 pm
by Eddy
No,the password in the extension properties window is for the login page to the editor.

The password and login for the filemanager is in the config.base.php
I cannot make this as option in the extension properties window because these files are not in the extension.

Its not encrypted you can change the password and login in the file with notepad,or open the file in a php editor to change the names.

In a php editor the file looks like this

Code: Select all

<?php
	/**
	 * sysem base config setting
	 * @author Logan Cai (cailongqun [at] yahoo [dot] com [dot] cn)
	 * @link www.phpletter.com
	 * @since 1/August/2007
	 *
	 */
	

error_reporting(E_ALL);	
//error_reporting(E_ALL ^ E_NOTICE);	
	
	

	//Access Control Setting
	/**
	 * turn off => false
	 * by session => true
	 */
	define('CONFIG_ACCESS_CONTROL_MODE', false); 	
	define("CONFIG_LOGIN_USERNAME", 'sdfgdfgdfgdgfdgsdfsdfg3454dsfb5e');
	define('CONFIG_LOGIN_PASSWORD', 'ASDF@#%JHGSDFGasdkjfh3812764ksdjfbhkjxcf');
	define('CONFIG_LOGIN_PAGE', 'ajax_login.php'); //the url to the login page
	
	//SYSTEM MODE CONFIG

Posted: Mon Oct 26, 2009 1:04 am
by Patr100
I know this is what I am referring to - I had it open in notepad

You mean the long random password and login - is it automatically generated ?
is it always the same unless we manually change it?

define('CONFIG_ACCESS_CONTROL_MODE', false);
define("CONFIG_LOGIN_USERNAME", 'sdfgdfgdfgdgfdgsdfsdfg3454dsfb5e');
define('CONFIG_LOGIN_PASSWORD', 'ASDF@#%JHGSDFGasdkjfh3812764ksdjfbhkjxcf');
define('CONFIG_LOGIN_PAGE', 'ajax_login.php'); //the url to the login page

Posted: Mon Oct 26, 2009 1:12 am
by Eddy
No,its always the same unless you manually change it.

The long password and login are inserted from the developer as example.

Posted: Mon Oct 26, 2009 2:17 am
by Patr100
Eddy wrote:No,its always the same unless you manually change it.

The long password and login are inserted from the developer as example.
Ok but we don't ever enter it?
When is it used?
So it's best to change it to something else anyway?

Posted: Mon Oct 26, 2009 3:35 am
by Eddy
Ok but we don't ever enter it?
When is it used?
So it's best to change it to something else anyway?
If you enable it (Change false to 1) you have to type the password and login if you need to upload a file with the filemanager.

You should enable this option so nobody else can upload files to your server!

Posted: Mon Oct 26, 2009 10:59 am
by Patr100
Oh I get it .


I assume the config.base.php file itself is not vulnerable to attack without some form of encrypted username/password ?

Posted: Mon Oct 26, 2009 1:21 pm
by Eddy
I assume the config.base.php file itself is not vulnerable to attack without some form of encrypted username/password ?
Its a php file you cannot read the file in a browser,for more information you have to ask the developer,I asume its very secure otherwise they would have changed the login for the filemanager.

Posted: Fri Nov 20, 2009 6:41 pm
by Eddy
I have not tested if this also change the editor backgroundcolor.
I have inserted a css file to make your own styles.
Go to login.php and remove the two // and make your style in:

Code: Select all

jscripts/tiny_mce/plugins/template/css/content.css
This code is in login.php.

Code: Select all

 // Example  content CSS (should be your site CSS)
 //content_css : "jscripts/tiny_mce/plugins/template/css/content.css",

Related forums.
http://tinymce.moxiecode.com/punbb/view ... hp?id=1138
http://tinymce.moxiecode.com/punbb/viewtopic.php?id=288

Posted: Thu Dec 03, 2009 4:10 pm
by Eddy
All your questions are answered in the pdf.
Read also in this topic ,i have answered almost every problem.

Make sure that all files are in the same directorie as your webbuilder pages.

You can use the build-in ftp to cmod the files/folders.( click explore in the publish window)

Posted: Tue Dec 08, 2009 7:33 pm
by Eddy
I have updated the first post in this topic with the most asked questions.

This extension works almost the same as the News Writer extension from the official download page,but the News Writer is easyer to install.

-Insert the extension on the page.
-change password etc in the properties window.
-make a textlink to the login page.
-upload the wb page ( page extension = php )
-upload with ftp the jscripts folder to the same directorie.
-change the file permissions to 777

Make sure all files and WB pages are in the same directorie!

You can use the build-in ftp to cmod the files/folders.( click explore in the publish window)

I don`t know what to explain more than this to make it work for you :?

Posted: Wed Dec 09, 2009 2:10 pm
by Eddy
Maybe the server from your customer had a problem :?

I have lilcms v2 used but changed the php code to make it compatible with php5 and used not the same editor.

You can choose html , txt or php for the content pages.
I have inserted avi and flash video`s withoud any problem in one page. (together more than 5 mb.)

Posted: Thu Dec 10, 2009 5:06 am
by Eddy
if you want do a test copy and paste some text with links repeatedly for a longggggggg scroll and see how it performs then.
If you used .txt pages how did the links than work?
Install the cms on your server and try if you have the same problem.

Posted: Sun Dec 13, 2009 8:28 pm
by me.prosenjeet
Hello Eddy,

On a page I have created 3 windows that are using the cms extension. They are working perfect. Bit moment I am adding another window of the cms extension, it is giving the following error:
Warning: include(content/adshome.html) [function.include]: failed to open stream: No such file or directory in /home2/eye/public_html/demo/index.php on line 321

Warning: include(content/adshome.html) [function.include]: failed to open stream: No such file or directory in /home2/eye/public_html/demo/index.php on line 321

Warning: include() [function.include]: Failed opening 'content/adshome.html' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home2/eye/public_html/demo/index.php on line 321

The three 'Special programs' section has the cms installed but the long column you see on the right, read the error message. I initially tried the long white part in a master page and then to put on all pages but it gave the same error (by the way this site has been updated to 6.5.1)

Posted: Sun Dec 13, 2009 8:57 pm
by Eddy
Only objects on a masterpage are included.
This code is in page html and wil not work with masterpages.

But you can with wb 6.5 include your code in all pages with:
Menu-->Page-->site html -->beginning of body.

Example:

Code: Select all

<div id="news1" style="position:absolute;overflow:auto;left:259px;top:137px;width:255px;height:87px;z-index:0;
border:1px #A52A00 solid">   
<?php include('content/news.html') ?>
</div>
Or insert the include code in HTML object on the masterpage,that maybe wil also work. :?

Posted: Sun Dec 13, 2009 9:07 pm
by me.prosenjeet
Thanks a load Eddy, I could make it work

Posted: Mon Dec 14, 2009 1:50 am
by me.prosenjeet
First: Any reason why image upload through the script is not happening!
I tried several times. Can you help please eddy, I can give you the admin login for you to have a look.

Second: All remote hosted (tinypic) images I can use but when ever I am hyper linking them, they show a marked purple border...how we can remove that?

Posted: Mon Dec 14, 2009 2:00 am
by Eddy
me.prosenjeet wrote:First: Any reason why image upload through the script is not happening!
Are al files/folders in the same directorie?
Did you see an error if u use the ajax file uploader?
Did you CMOD the folders to read and write.
Almost all problems with the file manager are answered in this topic.
Second: All remote hosted (tinypic) images I can use but when ever I am hyper linking them, they show a marked purple border...how we can remove that?
Insert : border="0"

Image

Posted: Mon Dec 14, 2009 2:13 am
by me.prosenjeet
Eddy wrote:
me.prosenjeet wrote:First: Any reason why image upload through the script is not happening!
Are al files/folders in the same directorie?
Did you see an error if u use the ajax file uploader?
Did you CMOD the folders to read and write.
Almost all problems with the file manager are answered in this topic.]
As far as I see all the points you have mentioned I have taken care of. If you want I can post screenshot of each step I do in picture upload...or...I can give you the link with pass to check. Please give me a contact email.

Posted: Mon Dec 14, 2009 2:33 am
by me.prosenjeet
Here are the screenshots step by step

Image



Image



Image



Image



Image
Last image has the message ' [Object Error]'..image added was a jpeg

Posted: Mon Dec 14, 2009 2:48 am
by Eddy
I really have no idea what that error means,i found this on another forum but it was not the same error.

Maybe it helps.
Maybe your host added mod_security and recompiled Apache.
and have to white list ajaxfilemanager to get it to work properly.
I think the best is if you ask the developer team from the file manager.
http://www.phpletter.com/

Posted: Mon Dec 14, 2009 3:28 pm
by me.prosenjeet
Insert : border="0"
Thanks Eddy, that worked! :D

For the second issue I am talking to my host to see if the problem is at their end.
Still I would insist if you had a look at the thing personally. Please mail me your email id so I may send you the details of login etc

Posted: Mon Dec 14, 2009 6:19 pm
by Eddy
If the file manager could not find the folder or files than I could help you but with this error I have no idea where to search?
But I think its a server problem otherwise more users would have posted this problem.

Please send a mail to the developer team from the file manager.
http://www.phpletter.com/

Posted: Mon Dec 21, 2009 11:47 am
by Eddy
I have just downloaded the extension and the files are there.

Download WYSIWYG CMS. (Please read the pdf !!)
http://www.mediafire.com/file/atj2o2got ... nclude.zip

Posted: Wed Jan 06, 2010 2:26 pm
by me.prosenjeet
Eddy,
How can we change the background colour of a page in the "content" folder?

If the answer is try HTML instead of design view while editing, I am still unable to do.