by only disabling the built in version and not the standalone version surely ?
On Sat, Dec 3, 2011 at 11:43 PM, Terry Troxel <terry.tro...@gmail.com> wrote: > > Russ, > Ok, one of the fixit emails said to rename the cfide built-in fckeditor or > delete it. > I chose to rename it. > How else do I make sure the built-in version not the standalone is disabled. > Terry > > -----Original Message----- > From: Russ Michaels [mailto:r...@michaels.me.uk] > Sent: Saturday, December 03, 2011 2:29 PM > To: cf-talk > Subject: Re: Fckeditor Security Issues > > > A coldfusion patch or update only makes changes to coldfusion and the > cfadmin, it doesn't touch your website files, so if your fckeditor is > breaking after and update then you must still be using the cf built in > one or the error is related to CF and not to fckeditor. > > On Sat, Dec 3, 2011 at 5:03 PM, Terry Troxel <terry.tro...@gmail.com> wrote: >> >> Russ, >> >> I am using the standalone editor and have been since the first attacks > over >> a year ago, but the last couple of Coldfusion security patches have made > the >> image browser inoperable in the standalone as well. I have file and image >> uploading disabled and allow users to only see the image folder I give > them. >> >> At the first patch I read a post that said rename your Fckeditor folder. I >> did that and it was working fine until the second patch I believe on the >> 11th. >> >> I just don't want to do something stupid. >> >> >> >> Terry >> >> >> >> >> >> > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348939 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
