There was an unfortunate bug in CKFinder, which was left unattended. We do our best to provide reliable software, but even such weird bugs in software sometimes happen.
Once we found out that the bug exists in the setCookie function we released CKFinder 2.6.2.1 for anyone willing to take this occasion to update CKFinder 2.x to the latest stable version which is free of this bug.
Also, considering that the issue was definitely our fault, we fixed all previous packages of CKFinder for ASP/ASP.NET/ColdFusion/PHP starting from version 2.0 to make the patch process as smooth as possible. So anyone using an older version of CKFinder (e.g. 2.3), who is willing to simply get rid of the bug, may download CKFinder 2.3 again and just replace the invalid ckfinder.js
file (and refresh browser cache). This step can be performed by all clients, even the one with expired license. Again, this issue was unintentional and we did our best to fix all packages as soon as we realised what is the source of the issue. Also today we'll send an email to all registered users asking to download a fixed version of CKFinder, knowing that some of them might not notice that users are no longer able to use all features of CKFinder.
CKFinder for Java users should upgrade to 2.6.2.1, customers with expired license that do not want to update to the latest stable version may contact us in order to get a fixed package without the need to update their license.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…