Hi,

I’d like to use FCKeditor extension in my Multi Site Manager (MSM) installation, but have problems using it in all the sites within my MSM-installation.

The EE installation is located in
/home/###/domains/site 1/public_html/
and fckeditor installation in
/home/###/domains/site 1/public_html/scripts/fckeditor/

The other locations are
/home/###/domains/site 2/public_html/ for site 2
/home/###/domains/site 3/public_html/ for site 3

When I use the Insert Image function from FCKeditor in Site 2 and 3, I’m getting the Images from Site 1, since the settings of the Script URL (in the extension settings) are pointed to the /home/###/domains/site 1/public_html/scripts/fckeditor/ folder.

What are the possibilities to make it possible to use the editor in all three sites?

$Config[‘Enabled’] = true ;

Note the comment DIRECTLY ABOVE this line in the FCKEditor code:

As this states, simply setting ‘Enabled’ = true is NOT a secure way to run this fck file browser. If you know the address (and a savvy hacker familiar with ee or fckeditor could very easily figure it out), you can easily navigate directly to this file browser and use it WITHOUT logging in to EE.

Unfortunately, the EE routines for logging in and validating users are pretty dense stuff, and I haven’t yet been able to figure out how to extrapolate the standalone PHP code necessary to check for a logged in user on a non-EE PHP page like this. Any suggestions would be helpful.