/** 
* This function must check the user session to be sure that he/she is 
* authorized to upload and access files in the File Browser. 
*/ 
private string m_userName; 
private int m_userID; 
private int m_boardID; 
private bool m_isAuthenticated; 

private bool CheckAuthentication() 
{ 
// WARNING : DO NOT simply return "true". By doing so, you are allowing 
// "anyone" to upload and list the files in your server. You must implement 
// some kind of session validation here. Even something very simple as... 
// 
// return ( Session[ "IsAuthorized" ] != null && (bool)Session[ "IsAuthorized" ] == true ); 
// 
// ... where Session[ "IsAuthorized" ] is set to "true" as soon as the 
// user logs in your system. 

string userName = HttpContext.Current.User.Identity.Name; 

try 
{ 
if (HttpContext.Current.User.Identity.IsAuthenticated) 
{ 
string[] parts = userName.Split(';'); 
if (parts.Length == 3) 
{ 
m_userID = int.Parse(parts[0]); 
m_boardID = int.Parse(parts[1]); 
m_userName = parts[2]; 
m_isAuthenticated = true; 
} 
} 
} 
catch (Exception) 
{ 
m_userName = ""; 
m_userID = 0; 
m_boardID = 0; 
m_isAuthenticated = false; 
} 

return m_isAuthenticated; 
} 

public override void SetConfig() 
{ 
// SECURITY: You must explicitly enable this "connector". (Set it to "true"). 
Enabled = CheckAuthentication(); 

// URL path to user files. 
UserFilesPath = "/userfiles/"; 

// The connector tries to resolve the above UserFilesPath automatically. 
// Use the following setting it you prefer to explicitely specify the 
// absolute path. Examples: 'C://MySite//userfiles//' or '/root/mysite/userfiles/'. 
// Attention: The above 'UserFilesPath' URL must point to the same directory. 
UserFilesAbsolutePath = ""; 

// Due to security issues with Apache modules, it is recommended to leave the 
// following setting enabled. 
ForceSingleExtension = true; 

// Allowed Resource Types 
AllowedTypes = new string[] { "File", "Image", "Flash", "Media" }; 

// For security, HTML is allowed in the first Kb of data for files having the 
// following extensions only. 
HtmlExtensions = new string[] { "html", "htm", "xml", "xsd", "txt", "js" }; 

TypeConfig[ "File" ].AllowedExtensions = new string[] { "7z", "aiff", "asf", "avi", "bmp", "csv", "doc", "fla", "flv", "gif", "gz", "gzip", "jpeg", "jpg", "mid", "mov", "mp3", "mp4", "mpc", "mpeg", "mpg", "ods", "odt", "pdf", "png", "ppt", "pxd", "qt", "ram", "rar", "rm", "rmi", "rmvb", "rtf", "sdc", "sitd", "swf", "sxc", "sxw", "tar", "tgz", "tif", "tiff", "txt", "vsd", "wav", "wma", "wmv", "xls", "xml", "zip" }; 
TypeConfig[ "File" ].DeniedExtensions = new string[] { }; 
string filepath = "%UserFilesPath%" + m_userName + "/file/"; 
TypeConfig["File"].FilesPath = filepath; 
TypeConfig["File"].FilesAbsolutePath = (UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%file/"); 
TypeConfig["File"].QuickUploadPath = filepath; // "%UserFilesPath%" + m_userName + "/"; 
TypeConfig["File"].QuickUploadAbsolutePath = filepath; // (UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%"); 

TypeConfig[ "Image" ].AllowedExtensions = new string[] { "bmp", "gif", "jpeg", "jpg", "png" }; 
TypeConfig[ "Image" ].DeniedExtensions = new string[] { }; 
string imagepath = "%UserFilesPath%" + m_userName + "/image/"; 
TypeConfig["Image"].FilesPath = imagepath; 
TypeConfig["Image"].FilesAbsolutePath = (UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%image/"); 
TypeConfig["Image"].QuickUploadPath = imagepath; // "%UserFilesPath%" + m_userName + "/"; 
TypeConfig["Image"].QuickUploadAbsolutePath = (UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%"); 

TypeConfig[ "Flash" ].AllowedExtensions = new string[] { "swf", "flv" }; 
TypeConfig[ "Flash" ].DeniedExtensions = new string[] { }; 
TypeConfig[ "Flash" ].FilesPath = "%UserFilesPath%flash/"; 
TypeConfig[ "Flash" ].FilesAbsolutePath = ( UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%flash/" ); 
TypeConfig[ "Flash" ].QuickUploadPath = "%UserFilesPath%"; 
TypeConfig[ "Flash" ].QuickUploadAbsolutePath = ( UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%" ); 

TypeConfig[ "Media" ].AllowedExtensions = new string[] { "aiff", "asf", "avi", "bmp", "fla", "flv", "gif", "jpeg", "jpg", "mid", "mov", "mp3", "mp4", "mpc", "mpeg", "mpg", "png", "qt", "ram", "rm", "rmi", "rmvb", "swf", "tif", "tiff", "wav", "wma", "wmv" }; 
TypeConfig[ "Media" ].DeniedExtensions = new string[] { }; 
TypeConfig[ "Media" ].FilesPath = "%UserFilesPath%media/"; 
TypeConfig[ "Media" ].FilesAbsolutePath = ( UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%media/" ); 
TypeConfig[ "Media" ].QuickUploadPath = "%UserFilesPath%"; 
TypeConfig[ "Media" ].QuickUploadAbsolutePath = ( UserFilesAbsolutePath == "" ? "" : "%UserFilesAbsolutePath%" ); 
}