FCKeditor available in 0.9.5?

Wasn’t sure if this belongs in the 095 thread or not because it’s been awhile since I’ve used MODx and I’m not sure what has changed. The features list for MODx here: http://modxcms.com/features.html list FCKeditor as built in with others such as TinyMCE available. On my 0.9.5 RC2 I only have TinyMCE listed as an available RTE editor. So did I do something wrong on my install or was FCKeditor removed maybe? Thanks!

The security issue with modx was a result of a script used by FCKeditor. Is there a particular feature you were looking for that exists in FCKeditor but does not exist in TinyMCE? You could always download an older version of MODx and take the plugin from there.

-sD-

For 095 and future releases TinyMCE will be default editor in MODx.

I’ve updated the feature page too..

Quote from: Dr. at Dec 05, 2006, 01:19 PM

The security issue with modx was a result of a script used by FCKeditor.

Let me clarify this issue just a little. The mcpuk ResourceBrowser that comes with FCKeditor and is also used by the version of TinyMCE integrated with the latest MODx. In fact, the security vulnerability was not something directly caused by FCKeditor or mcpuk out-of-the-box, but instead was a result of a poorly integrated php connector. We need to be clear on this issue and not blame FCKeditor/mcpuk for the issue. At worst, mcpuk allowed the vulnerable integration code to work.

awwww......craaaaapppp! Wasn’t aware of that. So I guess the followup question is: has anything been done in recent FCKeditor versions to remove this malicious script? I do prefer FCK as it is a bit more flexible for my needs. For example, the color selection has more options and let’s you enter a hex value. I also appreciate the tight integration between FCk and the file manager and link browser. If FCK will never be restored by the MODx team, is it a tremendous task to add it back in?

Jeff keeps them both up to date actually.

Quote from: rthrash at Dec 05, 2006, 02:05 PM

Jeff keeps them both up to date actually.

OK, now I’m really confused. Should FCK be part of the standard install or does/can it install separately?

Quote from: davedenis at Dec 05, 2006, 02:00 PM

awwww......craaaaapppp! Wasn’t aware of that. So I guess the followup question is: has anything been done in recent FCKeditor versions to remove this malicious script?

This was addressed in our security patches/releases that followed the vulnerability announcement; I’m just clarifying the blame. There is nothing malicious in the script itself and both plugins will work moving forward. FCKeditor will just be available as an add-on and TinyMCE will be distributed by default.

Quote from: OpenGeek at Dec 05, 2006, 02:11 PM

Quote from: davedenis at Dec 05, 2006, 02:00 PM

awwww......craaaaapppp! Wasn’t aware of that. So I guess the followup question is: has anything been done in recent FCKeditor versions to remove this malicious script?

This was addressed in our security patches/releases that followed the vulnerability announcement; I’m just clarifying the blame. There is nothing malicious in the script itself and both plugins will work moving forward. FCKeditor will just be available as an add-on and TinyMCE will be distributed by default.

Any background on why TinyMCE is the new default and FCK is a plugin? My brief experience with TinyMCE has produced invalid XHTML with font tags everywhere. It seems like the the FCK resource browser is already in use.

Because FCKeditor actually destroys code much more horrendously than TinyMCE... in fact, TinyMCE pretty much leaves your code alone. Have you tried it in the 095 RC3 release?