CKeditor and CKfinder integration/authentication with WebYep

General discussions about WebYep
Post Reply
DesignNorth
Rank 2
Rank 2
Posts: 57
Joined: Mon Apr 23, 2007 4:49 pm

CKeditor and CKfinder integration/authentication with WebYep

Post by DesignNorth » Sat Jun 18, 2011 12:54 pm

as a followup to http://forums.obdev.at/viewtopic.php?f=6&t=4536

I decided on using CKeditor and CKfinder working together with WebYep. But frustratingly fail on the last hurdle...

CKeditor is installed and working correctly in webyep-system/program/opt folder
CKfinder is installed and working in correctly webyep-system/program/opt folder

If I temporarily change the CKfinder config.php to...

Code: Select all

function CheckAuthentication()
{
     return true;
}


CKfinder is uploading saving files to a userfiles folder in the main public_html folder. So go so far.

I've following the instructions here http://forums.obdev.at/viewtopic.php?f=6&t=4536

1. Install CKFinder in the folder /webyep-system/program/opt/ckfinder
2. Set up HTTP Authentication on your server for that folder (using .htaccess or any other mechanism provided by your ISP)
3. Then adapt the CKFinder config's CheckAuthentication() function - change the "return false;" to:

Code: Select all

function CheckAuthentication()
{
     return isset($_SERVER['PHP_AUTH_USER']) || isset($_SERVER['REMOTE_USER']);
}


This has all been done.

HOWEVER...

The problem is when accessing CKfinder direct from CKeditor the .htaccess prompt is triggered asking to log in.

Question: how do I get .htaccess authentication for CKfinder though the WebYep/CKeditor interface?

marcus
Objective Development
Objective Development
Posts: 170
Joined: Tue Nov 30, 2010 1:25 pm

Re: CKeditor and CKfinder integration/authentication with WebYep

Post by marcus » Mon Jun 20, 2011 10:52 am

DesignNorth wrote:The problem is when accessing CKfinder direct from CKeditor the .htaccess prompt is triggered asking to log in.

That's the point of setting up an authentication mechanism.

DesignNorth wrote:Question: how do I get .htaccess authentication for CKfinder though the WebYep/CKeditor interface?

The brief answer is: you don't.

Currently there is no way for CKFinder (or any other file manager - commercial or not) to use WebYep's authentication mechanism. We will include support for various file managers in a future version of WebYep. Currently HTTP Authentication is the only way to get a reasonably secure file upload feature for WebYep.

DesignNorth
Rank 2
Rank 2
Posts: 57
Joined: Mon Apr 23, 2007 4:49 pm

Re: CKeditor and CKfinder integration/authentication with WebYep

Post by DesignNorth » Mon Jun 20, 2011 11:22 am

Ahhh right...

So I have set it up correctly to the limits of WebYep's current capability?

I suppose making the .htaccess password the same as the client's WebYep passwords would help.

marcus
Objective Development
Objective Development
Posts: 170
Joined: Tue Nov 30, 2010 1:25 pm

Re: CKeditor and CKfinder integration/authentication with WebYep

Post by marcus » Mon Jun 20, 2011 2:11 pm

DesignNorth wrote:So I have set it up correctly to the limits of WebYep's current capability?

If you're able to use CKFinder after logging in via HTTP-Auth (and are unable to do so, if not logged in), then everything is set up correctly.

DesignNorth wrote:I suppose making the .htaccess password the same as the client's WebYep passwords would help.

Yes, there is no gain in security if you use 2 different logins.
Unless you have multiple logins for WebYep and only want specific users to be able to upload files, one username/password is fine.

mfrieauff
Rank 1
Rank 1
Posts: 21
Joined: Wed Jun 10, 2009 1:36 pm

Re: CKeditor and CKfinder integration/authentication with WebYep

Post by mfrieauff » Thu May 24, 2012 4:49 pm

May I jump on that thread:
How do I do a HTTP-Auth? I am a complete newbie regarding PHP coding, so maybe you can explain in detail how I can do that? Thanks!

mfrieauff
Rank 1
Rank 1
Posts: 21
Joined: Wed Jun 10, 2009 1:36 pm

Re: CKeditor and CKfinder integration/authentication with WebYep

Post by mfrieauff » Thu Jun 21, 2012 11:13 am

bump...can anybody respond please?

Post Reply