mirror/php-tinyfilemanager
1
0
Fork 0
mirror of https://github.com/prasathmani/tinyfilemanager.git synced 2025-07-29 04:51:15 +02:00
Code Issues Releases Wiki Activity

Fix advanced search issue for read-only user (#785)

Browse Source 
$_POST['type']=="search" not reachable if FM_READONLY is true
This commit is contained in:
Apichart F
2022-05-27 12:36:25 +07:00
committed by GitHub
parent 04c1d45b5f
commit 50ccd29623
1 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
tinyfilemanager.php
View File

@@ -456,14 +456,6 @@ if (isset($_POST['ajax']) && !FM_READONLY) {
die(true); die(true);
} }
//search : get list of files from the current folder
if(isset($_POST['type']) && $_POST['type']=="search") {
$dir = FM_ROOT_PATH;
$response = scan(fm_clean_path($_POST['path']), $_POST['content']);
echo json_encode($response);
exit();
}
// backup files // backup files
if (isset($_POST['type']) && $_POST['type'] == "backup" && !empty($_POST['file'])) { if (isset($_POST['type']) && $_POST['type'] == "backup" && !empty($_POST['file'])) {
$fileName = $_POST['file']; $fileName = $_POST['file'];
@@ -632,6 +624,16 @@ if (isset($_POST['ajax']) && !FM_READONLY) {
exit(); exit();
} }
if (isset($_POST['ajax'])) {
//search : get list of files from the current folder
if(isset($_POST['type']) && $_POST['type']=="search") {
$dir = FM_ROOT_PATH;
$response = scan(fm_clean_path($_POST['path']), $_POST['content']);
echo json_encode($response);
exit();
}
}
// Delete file / folder // Delete file / folder
if (isset($_GET['del']) && !FM_READONLY) { if (isset($_GET['del']) && !FM_READONLY) {
$del = str_replace( '/', '', fm_clean_path( $_GET['del'] ) ); $del = str_replace( '/', '', fm_clean_path( $_GET['del'] ) );