CKEditor - Replaces TinyMCE v1.0

Release Notes

The issues with having multiple instances of CKEditor running on the same page problem are fixed. Let me know if you find any other bugs, there is an error with the developer edition of google chrome, but that has to do with the browser itself, this has been tested with firefox, IE, and the non-dev version of google chrome.

Also Included support for Blogs and the Save Draft Feature.The save draft will save your draft for the blog entry your editing, if you leave to do something else, as long as its the same session (ie you dont log out) it will still be there when you go back.If you go to edit a different blog post and save that draft the other draft changes will be lost.

  • Nice editor, BUT the use of the files plugin folder to store images is a problem as it swamps the site's files folder with images. Is there a way to use a dedicated folder to store uploaded files on the server? I.e. could the plugin be modified to use another dedicated folder on the server?



  • One issue - graphics that are inserted via CKEditor don't show up in all members browsers. I believe the issue is in Vista using IE8.

    I am still analysing feedback from my site at As soon as I am sure that the problem is in a specific OS with a particular Browser I'll pst my result here.

    Has anyone else encountered this problem?


  • @BigG - Nice job on your Elgg site.  I like it.  :-)

  • we had the graphics problem, too.

    it's not IE related, but the uploaded files are stored with the 'wrong' access value.

    i changed the line reading

            $filehandler->access_id = ACCESS_DEFAULT;


            $filehandler->access_id = ACCESS_LOGGED_IN;

    in CKEditor/actions/upload.php and the problem went away (not sure if this is the "right" way to do it, but it works).

    This change will fix only newly uploaded files though :(


  • Thanks Ilu. I've edited the file and it seems to be working - I'm still waiting for feedback from the site members that had problems for full confirmation that everything is now OK.

    One question, why would some members have problems seeing graphics in blogs but not others? I would have thought that as the root problem is in the coding of a php file on the server it would have shown up as a global problem for all site members.

    Anyway, I'm deeply indebted to you MANY THANKS!


  • Thnks for your kind words Yakiv! Much appreciated!


  • Hey springs,

    i reported a security bug in FCKEditor. u can read ticket on:

    if need some help to change code filtering to evade some XSS injections tell me.

    see u.

  • When you click to insert an image in CKEditor there is a preview pane that has this text in it: "Lorem ipsum dolor sit amet,etc." (before the preview of the uploaded image is displayed).

    I've tried to locate the appopriate file in CKEditor where this text can be edited - but cannot find it, despite using Firebug. It's obviously there somewhere - BUT WHERE?!

    Can anyone help? I just need to know where to find it in the /mod/ckeditor folder on my server.



  • Psy: That security bug is actually in ELGG :) not in CKEditor, CKEditor only posts information, it doesn't do anything after you submit it, that is on elgg's end.

    BigG: the files your looking for are.

    CKEditor\ckeditor\plugins\image\dialogs\image.js : position 11:698 (line:char)


    CKEditor\ckeditor\_source\plugins\image\dialogs\image.js : position 906:56 (line:char)

  • Thanks SH.

    I've located the two files and edited them, however the same text

    (Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Maecenas feugiat consequat diam. Maecenas metus. Vivamus diam purus, cursus a, commodo non, facilisis vitae, nulla. Aenean dictum lacinia tortor. Nunc iaculis, nibh non iaculis aliquam, orci felis euismod neque, sed ornare massa mauris sed velit. Nulla pretium mi et risus. Fusce mi pede, tempor id, cursus ac, ullamcorper nec, enim. Sed tortor. Curabitur molestie. Duis velit augue, condimentum at, ultrices a, luctus ut, orci. Donec pellentesque egestas eros. Integer cursus, augue in cursus faucibus, eros pede bibendum sem, in tempus tellus justo quis ligula. Etiam eget tortor. Vestibulum rutrum, est ut placerat elementum, lectus nisl aliquam velit, tempor aliquam eros nunc nonummy metus. In eros metus, gravida a, gravida sed, lobortis id, turpis. Ut ultrices, ipsum at venenatis fringilla, sem nulla lacinia tellus, eget aliquet turpis mauris non enim. Nam turpis. Suspendisse lacinia. Curabitur ac tortor ut ipsum egestas elementum. Nunc imperdiet gravida mauris.)

    appears in the Preview panel of the image info screen in CKEditor.

    Have I missed something here? The two files that I opened for editing had the above wording - which I edited with the wording I want displayed, however, it has made no difference!

    I'm puzzled. Does the CKEditor pick this text up from another .js file?

    Sorry to be a pain.



  • SH: Confirmed, is a problem of elgg core parsing :)

  • Thanks SH - mysteriously the correct wording is now appearing in the image preview panel (cache related quirk I think - it took a little longer than expected to refresh!)

    Anyway - everything is fine now. Our site members love the CHEditor, once they've familiarised themselves with it.

    Excellent plugin methinks!

  • Hi there.  Interested in testing out this plugin but it appears something is wrong with the zip file with the recommended release?  Can you open the previous release just fine however.

  • Hello,

    I would like to know if there is some function similar to:


    for CKEditor.



  • The editor is great, however embedding media (when I click on the Embed/Upload media link) does not work properly. Uploading works OK but embedding does not. There are no errors displayed or anything, simply nothing is embedded.

    When I revert to the default elgg editor (TinyMCE), embedding works again.



  • I have issues when uploading images - they simply do not show up.

    Tested on firefox and different server instances.

    When adding a page or a blog, and then trying to upload an image, the image successfully uploads to the server, but is not displayed in the page resp. blog post.

    When right-clicking on the image, and then choosing 'image properties', copying that url and pasting in the address field of the browser, I get this error:


    All files must have an owner!


  • I am having the same problem as Fabio. Running Elgg 1.6.1

  • This apparently helped for us, Keith:

    in mod/CKEditor/actions/upload.php

    $filehandler->owner_guid = $_SESSION['user']->getGUID();


    $filehandler->access_id = ACCESS_PUBLIC;



  • Probably a newbie question: how do I get the editor to display in the standard blog plugin? I have installed CKEdit in the mod directory and enabled it, but I still get the standard title/Blog text/tags HTML input fields when trying to add/edit a blog post. Do I need to use a different blog plugin than the standard one?


  • I'll answer myself: because I had ordered the tools incorrectly in the tools administrator. The editor needed to be at the very bottom, in my case.


  • When I try to upload a photo from my laptop the file name shows up but then when I "send it to server" I get an abridged shot of my elgg homepage and no image???  Do all the images have to be associated with a specific url to upload?

  • So I assume this is only for web based images and therefore my personal jpeg files have to be uploaded in the files section.  Obviously new to all of this!

  • Are you planning to maintain this plugin? CKEditor is now up to version 3.2.1 (this one uses 3.0.1) and there are some areas where this plugin is a little rough around the edges.

  • If you use:

    <img src="image.jpg" onload="alert('valid cross-site scripting');" />

    there is a XSS Injection possible.
    Enter this into the source code of an FCK window, just preview the Site and the JS executes.

    Browser: Firefox (latest)
    OS: WinXP SP2
    FCKG: Version 2.5 Build 17352
    Using FCK with PHP5

     it would be trivial for an evil user that tries to inject some attack to bypass a simple javascript protection.

  • I am having a strange issue:

    We use CKEditor to create new pages CMS like.

    When we have the following code INSIDE a CKEditor instance, the CKEditor displays the code right, but the newly created page doesn't display the code! Any idea what could be wrong?

    The same code works alright when in a standalone html test page.


    <form action="" id="paypalform" method="post">

    <input name="cmd" type="hidden" value="something" />

    <input name="hosted_button_id" type="hidden" value="SOME_ID" />

    <input alt="PayPal - The safer, easier way to pay online!" height="47" src="" type="image" width="144" />

    <img alt="" border="0" height="1" src="" width="1" />




  • Category: Tools
  • License: GNU General Public License (GPL) version 2
  • Updated: 2014-11-17
  • Downloads: 6387
  • Recommendations: 5

Other Projects

View Springs Hosting's plugins