search

widgetfactory / jce

JCE - A Content Editor for Joomla
https://www.joomlacontenteditor.net
GNU General Public License v2.0
35 stars 12 forks source link

Frontend editors seeing my file structure when uploading images #84

Open newjie opened 3 years ago

newjie commented 3 years ago

As I let authors to create content from frontend via JCE, when they are trying to insert image and click that image button, they will see the file structure on my server. I think this is a security issue.

ryandemmer commented 3 years ago

By default, the File Browser will list files and folders in the Joomla "images" directory.

If you want front-end users to use a different directory, you should create a new Editor Profile for them (use the "Front-end" profile as a starting point) and set a new File Directory Path for that profile in the Editor Parameters -> Filesystem tab.