Skip to: Site menu | Main content

Email LinkedIn


FCKEditor in Coldfusion

I began using FCKEditor long before it was included with Coldfusion. I've continued to use my own implemenation even after the release of Coldfusion 8.

There was a vulnerability found in the included FCKEditor:

I applied the patch to my server and it also broke my own FCKEditor instance. I received "403 Access Denied" errors when using the FCKEditor file browser. After much time and effort the solution is pretty simple:

Add this to your JVM args in jvm.config: -Dcoldfusion.fckupload=true

***CAREFUL about copying and pasting the text above. Hidden carriage returns will cause CF to fail on startup.***

Even if you are not using the Coldfusion FCKEditor you still need to enable FCKEditor uploads. The updated JAR must have a built-in request filter for "filemanager".

Comments (Comment Moderation is enabled. Your comment will not appear until approved.)
Dude, you rock! I've been searching Google for a couple hours trying to figure out why the file browser on every instance of FCKEditor on our server was broken.

Your fix worked beautifully. Thanks!
# Posted By Jamal Pilger | 5/25/11 4:06 PM
Doesn't seem to help on ColdFusion 9. Help!
# Posted By Dee | 9/30/11 4:46 PM
@Dee - Just had to implement this on a CF9 server. The FCKEditor in this instance is not the built-in CF9 HTML editor. Might be able to help if you can give some more specifics about your configuration.
# Posted By Jason Holden | 9/30/11 4:51 PM
Is there any way you could email me a coply of your
fckeditor folder so I can see what you've changed to
get the file manager to work. I do not allow uploading
period within FCKeditor, but do want to allow browsing
of a predefined IMAGE directory to view/insert images.
I have tried all sorts of fixes but still cannot get it to
work. I am good with Coldfusion, just not to swift with
Java and Jaqvascript.
# Posted By Terry T | 12/9/11 2:50 PM

Not sure I still have an instance of FCKEditor sitting around. I've upgraded all my instances to CKEditor ( I'd be happy to pass along the CF based file browser I made to operate with CKEditor.
# Posted By Jason Holden | 12/9/11 5:10 PM
I would really like to have that if you can find the time to shoot it my way.

Thank You
# Posted By Terry T. | 12/9/11 5:56 PM
Jason I hate to ask this, but when it comes to the inner workings of CF I am absolutely ignorant. Could you please describe what one would need to do to replace FCKeditor, with the new version of ckeditor? I too would love to have your CF based file browser for operate with CKEditor, however I need to get the new version of ckeditor installed first. I know this responsibility doesn't rest on your shoulders, I would even ask without attempting but either my google-foo is weak at the moment, or there doesn't seem to be very many articles in replacing FCK with ck for CF9.
# Posted By Todd | 3/21/12 12:19 PM
@Todd: To my knowledge and experience there is no way to directly replace the built-in FCKEditor that is used with the CFTEXTAREA. Since I usually do not use the built-in CF tags for inputs that was not an issue. What I've done is a very manual process in that each instance must be setup for each page(s). Happy to share my code and lend a hand if I can.
# Posted By Jason Holden | 4/12/12 12:58 PM
God bless you
this was driving me nuts
This tells me how Coldfusion Sucks and its time to convert to .NET
# Posted By @coldFusion Sucks | 10/23/12 2:54 PM
@Coldfusion Sucks - Not sure I'd go that far, but it can get frustrating. Frustration often leads me to wonder why I keep using it. The truth is you should use the tool that allows you to be the most productive. That said I would not advocate a wholesale "conversion" of anything but a very simple application.
# Posted By Jason Holden | 10/31/12 9:45 AM
This is exactly what I was looking for. It was the only thing I had to add and restart the server and FCKeditor's image upload worked again. Thank you.
# Posted By Cary Molyneux | 5/4/13 4:14 PM
I added the JVM argument on ColdFusion 10 and had no further problems. Very helpful, was an oversight when configuring our new CF10 server. -Dcoldfusion.fckupload=true

You have to go directly to the jvm.config file as the coldfusion administrator modifies the file in some ways that change it considerably. Be careful and do not change it in the administrator.
# Posted By Stephen Williams | 12/27/13 2:30 PM
Thanks a lot! This worked for me!
# Posted By Brody | 11/26/14 8:03 AM