Geeklog Forums

If I add fckeditor to 1.4.0sr4 then everything will be find security wise correct? also how would I go about adding FCK? is there a good install doc somewhere? note that I am on a fresh install of 1.4.0sr4 so I didn't think the upgrade doc would help.

First of all, this is the wrong forum because it's not exactly a Geeklog plugin.

Anyway, the upgrade steps are detailed here. Alas, beware that v2.3 doesn't work as Geeklog doesn't accept its stories!

So I will have to wait for 1.4.1?

1. It's still better to install v2.2 than staying with v2.1.1 .
   
2. Maybe someone would finally enter said topic and help us fix the 2 problems mentioned about v2.3, especially Geeklog's refusal to accept v2.3's intro/bodytext...
   

FCKeditor isn't exactly my favorite part of the Geeklog distribution, so I may be wrong ...

But from my understanding, all FCKeditor versions prior to 2.3 have a vulnerability in their file manager. Geeklog 1.4.0 ships with FCKeditor 2.1.1 where the file manager was replaced by the mcpuk file manager, which now also turned out to be vulnerable. So 1.4.0sr4 ships with FCKeditor 2.1.1 without any file manager.

So to me it seems that 1.4.0sr4 is the safest option outside of going all the way up to FCKeditor 2.3.

bye, Dirk

I agree and understand that. my question is has anyone done this? installed 2.3 on a 1.4.0sr4 install? I dont know enough to do this but I could follow along if someone has tryed this and had it work.

The internal API's changed with FCKeditor 2.3 so the advanced editor Javascript will break. The JS as been re-written as part of the next Geeklog release that is in cvs. I don't recommend trying to replace or merge the code in CVS unless you know what your doing.

On the positive side, the latest verson of FCK2.3 fixed API's that were needed for some other editor features and GL 1.4.1 will have an improved advanced editor.

---

Geeklog components by PortalParts -- www.portalparts.com

Which JS? Do you mean they re-wrote it or you?

What about the problem with the CSS (in the top menu)?

Like what?

Since you didn't answer, I tried using public_html/fckeditor and public_html/javascript from the CVS and now FCKeditor doesn't load at all.
[QUOTE The reason being]
'geeklogEditorBasePath' is undefined[/QUOTE]
It's written before the 2 JS files are called so I don't know what's the problem.

The top toolbar is also still missing its CSS.

Yap that's the major problem here. Blaine says only what he wants to say and only when he wants to say it. He doesn't answer questions. GL has more and more of his hands on it, and we get stuck more and more frequently when we encounter issues with his part of the scripts and he doesn't answer questions.

Now some of us have stopped using his forum script and chosen phpBBBridge instead.

Of course he has the rights not to answer the questions since these scripts are given away for free, and ultimately we might have to abandon Geeklog to other scripts where the questions are answered.