Filemanager icon indicating copy to clipboard operation
Filemanager copied to clipboard

403 Forbidden Uploading Image

Open jamboljack opened this issue 8 years ago • 8 comments

I uploaded web in other domain it's work uploading image, but i have another domain it's does'nt work.

A message in console : POST http://langgardalem.id/assets/filemanager/connectors/php/filemanager.php 403 (Forbidden)

I set file permission folder to 755

jamboljack avatar Feb 04 '17 01:02 jamboljack

Be sure the auth() method in config file returns true.

simogeo avatar Feb 04 '17 09:02 simogeo

Where is the location of file ??

jamboljack avatar Feb 06 '17 01:02 jamboljack

Oh,, I see,, wait

jamboljack avatar Feb 06 '17 02:02 jamboljack

* @copyright Authors */ ob_start(); include('../../../../index.php'); ob_end_clean(); $CI =& get_instance(); $CI->load->driver('session'); $session = @$_SESSION['logged_in_langgardalem']; if($session == TRUE) { $codeigniterAuth = true; } else { $codeigniterAuth = false; } /** * Check if user is authorized * * * @return boolean true if access granted, false if no access */ function auth() { // You can insert your own code over here to check if the user is authorized. // If you use a session variable, you've got to start the session first (session_start()) return $GLOBALS['codeigniterAuth']; } // we instantiate the Filemanager $fm = new Filemanager(); ?>

jamboljack avatar Feb 06 '17 08:02 jamboljack

auth

jamboljack avatar Feb 06 '17 08:02 jamboljack

I guess session_start() is missing

simogeo avatar Feb 07 '17 11:02 simogeo

I activate CSRF protection on config CI, each Form have script like this : <input type="hidden" name="<?php echo $this->security->get_csrf_token_name(); ?>" value="<?php echo $this->security->get_csrf_hash(); ?>">

If i deactivate that fiture, it's success. But how set the filemanager with CSRF Protection ? where i must set the token ??

jamboljack avatar Feb 08 '17 03:02 jamboljack

it is not implemented

simogeo avatar Feb 08 '17 07:02 simogeo