A
A
Al_ka2015-05-20 12:53:47
Yii
Al_ka, 2015-05-20 12:53:47

fckeditor + yii. How to close from unauthorized users?

Comrades. How to be?
Site on Yii. fckeditor included. Naturally, the file manager will be available at the link
www.site.ru/components/fckeditor/editor/filemanage...
I'm trying to close this hole like this.

$yii=dirname(__FILE__).'/../yii/framework/yii.php';
require_once($yii);
$config=dirname(__FILE__).'/../protected/config/main.php';
Yii::createWebApplication($config);

$Config['Enabled'] = isset(Yii::app()->user->id)?false:true ;

Does not work. I checked for definition as a guest, it turned out that he defines all users as a guest.
Tell me, what's the problem? I understand that I missed something important. Thanks in advance.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vladislav Kim, 2015-05-20
@kimvlad

I advise you to look towards RBAC . And check the user for the ability to perform this operation (in this case, the entrance to the FckEditor page)

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question