Hi.
I'm trying to create custom TV input for file management. It's like Assets Manager Extra, but for TV's. The problem is that I'm a designer, not a programmer, so I need help of real programmers to make it work fine.
What do i have now.
I've got custom TV input, with dropzone.js and jquery. It will show you files in associated folder. You can upload or delete files. Also you can sort them and write Alt and Description. Sort index, Alt and Description will be saved in TV as JSON. And you can double click file to insert in in TinyMCE with template specified in TV settings (it works with TinyMCE, and there will be more supported RTE's in future)
In TV settings you can set up path to store files. You can use [year], [month], [day], [id] placeholders to make path you want. E.g. /assets/images/[id]/. You can specify allowed file types and extensions, max_file size, and templates for adding files to Tiny MCE.
Also I have a snippet to display uploaded files in front end. And template chunk.
Everything works fine, Except one thing. AsstesTv.tpl sends POST to upload.php. Upload.php can reply with list of files in specified directory, upload or delete files. But it has NO SECURITY AT ALL. So YOU CAN'T USE THIS.
Looks like I need to use some connectors or processors. But there's not much info about it. Especially in Russian. I believe, I need to create a connector, which will use browser processor to upload and delete files, but i have no idea how to create it and how to make it secure. Another problem, is time. It will take forever for me, to understand how it works.
I hope that this TV will be very useful and I have a lot of ideas how to make it even more comfortable for managers. It will help you easily create posts, create image gallery, or attach files. But you need a real specialist when it's question of security.
So I need your help. If you can make this extension secure, better it will be great. If you have ideas how can I do it, it will be good too.
I cant, delete wrong assetstv-0.1-alpha.transport.zip 178.48Kb attach. Last one is correct.
http://dyranov.ru/assetstv-0.1-alpha.transport.zip — here is link if you can't see attaches.
[ed. note: dyranov last edited this post 11 years, 7 months ago.]
