Skip to: Site menu | Main content

Email Facebook LinkedIn Twitter Google

Blog...

FCKEditor in Coldfusion

I began using FCKEditor long before it was included with Coldfusion. I've continued to use my own implemenation even after the release of Coldfusion 8.

There was a vulnerability found in the included FCKEditor: http://www.adobe.com/support/security/bulletins/apsb09-09.html

I applied the patch to my server and it also broke my own FCKEditor instance. I received "403 Access Denied" errors when using the FCKEditor file browser. After much time and effort the solution is pretty simple:

Add this to your JVM args in jvm.config: -Dcoldfusion.fckupload=true

***CAREFUL about copying and pasting the text above. Hidden carriage returns will cause CF to fail on startup.***

Even if you are not using the Coldfusion FCKEditor you still need to enable FCKEditor uploads. The updated JAR must have a built-in request filter for "filemanager".

Comments (Comment Moderation is enabled. Your comment will not appear until approved.)
Dude, you rock! I've been searching Google for a couple hours trying to figure out why the file browser on every instance of FCKEditor on our server was broken.

Your fix worked beautifully. Thanks!
# Posted By Jamal Pilger | 5/25/11 4:06 PM
Doesn't seem to help on ColdFusion 9. Help!
# Posted By Dee | 9/30/11 4:46 PM
@Dee - Just had to implement this on a CF9 server. The FCKEditor in this instance is not the built-in CF9 HTML editor. Might be able to help if you can give some more specifics about your configuration.
# Posted By Jason Holden | 9/30/11 4:51 PM
Jason,
Is there any way you could email me a coply of your
fckeditor folder so I can see what you've changed to
get the file manager to work. I do not allow uploading
period within FCKeditor, but do want to allow browsing
of a predefined IMAGE directory to view/insert images.
I have tried all sorts of fixes but still cannot get it to
work. I am good with Coldfusion, just not to swift with
Java and Jaqvascript.
# Posted By Terry T | 12/9/11 2:50 PM
@Terry

Not sure I still have an instance of FCKEditor sitting around. I've upgraded all my instances to CKEditor (http://ckeditor.com/). I'd be happy to pass along the CF based file browser I made to operate with CKEditor.
# Posted By Jason Holden | 12/9/11 5:10 PM
I would really like to have that if you can find the time to shoot it my way.

Thank You
# Posted By Terry T. | 12/9/11 5:56 PM