extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-12-23 07:09:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

"check for a valid eGW session"

Browse Source
This commit is contained in:
Ralf Becker 2008-04-15 08:04:26 +00:00
parent a58cd51617
commit 256163ba98
1 changed files with 160 additions and 146 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
phpgwapi/js/fckeditor/editor/filemanager/connectors/php/config.php
View File

@ -27,8 +27,22 @@ global $Config ;
// SECURITY: You must explicitly enable this "connector". (Set it to "true").
// WARNING: don't just set "$Config['Enabled'] = true ;", you must be sure that only
// authenticated users can access this file or use some kind of session checking.
$Config['Enabled'] = true ;
//$Config['Enabled'] = false ;
function deny_no_egw_session(&$account)
{
die('Access denied!');
}
$GLOBALS['egw_info'] = array(
'flags' => array(
'currentapp' => 'sitemgr',
'noheader' => true,
'autocreate_session_callback' => 'deny_no_egw_session',
)
);
// will not continue, unless the header get's included, there is a valid eGW session and the user has sitemgr rights
require('../../../../../../../header.inc.php');
$Config['Enabled'] = $GLOBALS['egw']->session->session_flags == 'N'; // disallow anonymous users
// Path to user files relative to the document root.
//$Config['UserFilesPath'] = '' ;
@ -51,7 +65,7 @@ $Config['SecureImageUploads'] = true;
$Config['ConfigAllowedCommands'] = array('QuickUpload', 'FileUpload', 'GetFolders', 'GetFoldersAndFiles', 'CreateFolder') ;
// Allowed Resource Types
$Config['ConfigAllowedTypes'] = array('images','File', 'Image', 'Flash', 'Media') ;
$Config['ConfigAllowedTypes'] = array('File', 'Image', 'Flash', 'Media') ;
// For security, HTML is allowed in the first Kb of data for files having the
// following extensions only.