one final thing (hopefully) for this thread - I hope I can explain it clearly...
In my PowerCMS settings, in my wa_settings table, my image upload folder is set to 'images'.
This is great as it means an admin cannot access any folder outside of the images folder when uploading image files, so they are all going to be in approximately the right place.
However, if I try and create a link using the browser button in thehtml editor, (now that php files are permitted). I can only navigate to within the images folder, I can't access the root folder.
If I remove the images folder from the wa_settings table, and set my image upload folder to site root, then I can now navigate to the site root, but does this meanthat images are no longer restricted to the images folder ?
In my htmleditor upload settings, i can set a startup folder, but it looks like the user is not restricted to this folder.
I don't want the admin user to be able to access the site root, only the images folder when uploading an image.
Is there a way around this, or I am not understanding the way it works ?