session_auth

.buildpath

@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<buildpath>
+	<buildpathentry kind="src" path=""/>
+	<buildpathentry kind="con" path="org.eclipse.php.core.LANGUAGE"/>
+</buildpath>

.project

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>Tinymce4Filemanager</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+		<buildCommand>
+			<name>org.eclipse.wst.validation.validationbuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+		<buildCommand>
+			<name>org.eclipse.dltk.core.scriptbuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+	</buildSpec>
+	<natures>
+		<nature>org.eclipse.php.core.PHPNature</nature>
+	</natures>
+</projectDescription>

.settings/org.eclipse.php.core.prefs

@@ -0,0 +1,3 @@
+eclipse.preferences.version=1
+include_path=0;/FileManager4TinyMCE
+use_asp_tags_as_php=false

tinymce/plugins/filemanager/config.php

@@ -1,5 +1,5 @@
 <?php 
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbidden');
+include_once 'session_auth.php';
 
 $root = rtrim($_SERVER['DOCUMENT_ROOT'],'/'); // don't touch this configuration
 
@@ -8,17 +8,17 @@
 //**********************
 // In this configuration the folder tree is
 // root
+//   |- uploads <- upload folder
 //   |- tinymce
-//   |    |- source <- upload folder
 //   |    |- js
 //   |    |   |- tinymce
 //   |    |   |    |- plugins
 //   |    |   |    |-   |- filemanager
 //   |    |   |    |-   |-      |- thumbs <- folder of thumbs [must have the write permission]
 
 $base_url="http://localhost"; //url base of site if you want only relative url leave empty
-$upload_dir = '/tinymce/source/'; // path from base_url to upload base dir
-$current_path = '../../../../source/'; // relative path from filemanager folder to upload files folder
+$upload_dir = '/uploads/'; // path from base_url to upload base dir
+$current_path = '../../../../../uploads/'; // relative path from filemanager folder to upload files folder
 
 $MaxSizeUpload=100; //Mb
 

tinymce/plugins/filemanager/create_folder.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 include 'config.php';
 include('utils.php');
 

tinymce/plugins/filemanager/delete_file.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 include 'config.php';
 include('utils.php');
 

tinymce/plugins/filemanager/delete_folder.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 include 'config.php';
 include('utils.php');
 

tinymce/plugins/filemanager/dialog.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-$_SESSION["verify"] = "FileManager4TinyMCE";
+include_once 'session_auth.php';
 
 if(isset($_POST['submit'])){
 

tinymce/plugins/filemanager/force_download.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 include 'config.php';
 
 $path=$_POST['path'];

tinymce/plugins/filemanager/session_auth.php

@@ -0,0 +1,4 @@
+<?php 
+session_start();
+if(!isset($_SESSION["FileManager4TinyMCE"]) || !$_SESSION["FileManager4TinyMCE"])
+    die('forbidden');

tinymce/plugins/filemanager/upload.php

@@ -1,7 +1,5 @@
 <?php
-
-session_start();
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 
 include('config.php');
 include('utils.php');

tinymce/plugins/filemanager/utils.php

@@ -1,6 +1,5 @@
 <?php 
-
-if($_SESSION["verify"] != "FileManager4TinyMCE") die('forbiden');
+include_once 'session_auth.php';
 
 function deleteDir($dir) {
     if (!file_exists($dir)) return true;