403 Forbidden Uploading Image #525

Activity

1. simogeo commented on Feb 4, 2017

   

   simogeo

   on Feb 4, 2017

   Owner

   More actions

   Be sure the auth() method in config file returns true.
2. simogeo

   closed this as completedon Feb 4, 2017
3. simogeo

   reopened this on Feb 4, 2017
4. jamboljack commented on Feb 6, 2017

   

   jamboljack

   on Feb 6, 2017

   Author

   More actions

   Where is the location of file ??
5. jamboljack commented on Feb 6, 2017

   

   jamboljack

   on Feb 6, 2017

   Author

   More actions

   Oh,, I see,, wait
6. jamboljack commented on Feb 6, 2017

   

   jamboljack

   on Feb 6, 2017

   Author

   More actions

   * @copyright Authors */ ob_start(); include('../../../../index.php'); ob_end_clean(); $CI =& get_instance(); $CI->load->driver('session'); $session = @$_SESSION['logged_in_langgardalem']; if($session == TRUE) { $codeigniterAuth = true; } else { $codeigniterAuth = false; } /** * Check if user is authorized * * * @return boolean true if access granted, false if no access */ function auth() { // You can insert your own code over here to check if the user is authorized. // If you use a session variable, you've got to start the session first (session_start()) return $GLOBALS['codeigniterAuth']; } // we instantiate the Filemanager $fm = new Filemanager(); ?>
7. jamboljack commented on Feb 6, 2017

   

   jamboljack

   on Feb 6, 2017

   Author

   More actions

   
8. simogeo commented on Feb 7, 2017

   

   simogeo

   on Feb 7, 2017

   Owner

   More actions

   I guess session_start() is missing
9. jamboljack commented on Feb 8, 2017

   

   jamboljack

   on Feb 8, 2017

   Last edited by jamboljack

   Author

   More actions

   I activate CSRF protection on config CI, each Form have script like this :
   <input type="hidden" name="<?php echo $this->security->get_csrf_token_name(); ?>" value="<?php echo $this->security->get_csrf_hash(); ?>">

   If i deactivate that fiture, it's success. But how set the filemanager with CSRF Protection ? where i must set the token ??
10. simogeo commented on Feb 8, 2017

    

    simogeo

    on Feb 8, 2017

    Owner

    More actions

    it is not implemented