Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

403 Forbidden Uploading Image #525

Open
jamboljack opened this issue Feb 4, 2017 · 8 comments
Open

403 Forbidden Uploading Image #525

jamboljack opened this issue Feb 4, 2017 · 8 comments

Comments

@jamboljack
Copy link

I uploaded web in other domain it's work uploading image, but i have another domain it's does'nt work.

A message in console :
POST http://langgardalem.id/assets/filemanager/connectors/php/filemanager.php 403 (Forbidden)

I set file permission folder to 755

@simogeo
Copy link
Owner

simogeo commented Feb 4, 2017

Be sure the auth() method in config file returns true.

@simogeo simogeo closed this as completed Feb 4, 2017
@simogeo simogeo reopened this Feb 4, 2017
@jamboljack
Copy link
Author

Where is the location of file ??

@jamboljack
Copy link
Author

Oh,, I see,, wait

@jamboljack
Copy link
Author

* @copyright Authors */ ob_start(); include('../../../../index.php'); ob_end_clean(); $CI =& get_instance(); $CI->load->driver('session'); $session = @$_SESSION['logged_in_langgardalem']; if($session == TRUE) { $codeigniterAuth = true; } else { $codeigniterAuth = false; } /** * Check if user is authorized * * * @return boolean true if access granted, false if no access */ function auth() { // You can insert your own code over here to check if the user is authorized. // If you use a session variable, you've got to start the session first (session_start()) return $GLOBALS['codeigniterAuth']; } // we instantiate the Filemanager $fm = new Filemanager(); ?>

@jamboljack
Copy link
Author

auth

@simogeo
Copy link
Owner

simogeo commented Feb 7, 2017

I guess session_start() is missing

@jamboljack
Copy link
Author

jamboljack commented Feb 8, 2017

I activate CSRF protection on config CI, each Form have script like this :
<input type="hidden" name="<?php echo $this->security->get_csrf_token_name(); ?>" value="<?php echo $this->security->get_csrf_hash(); ?>">

If i deactivate that fiture, it's success. But how set the filemanager with CSRF Protection ? where i must set the token ??

@simogeo
Copy link
Owner

simogeo commented Feb 8, 2017

it is not implemented

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants