1
0
mirror of https://github.com/prasathmani/tinyfilemanager.git synced 2025-07-09 19:36:19 +02:00

142 Commits
2.0.1 ... 2.4.3

Author SHA1 Message Date
1dbe7c5339 dark mode #352
Request: Dark mode option in the admin section. #260
2020-05-24 14:00:27 +05:30
8fb1816877 Create a new session if permission denied on current one (#331)
In a multi-user configuration, the current session file can be unreadable
by the current user. This tries to create a new session in this case.
2020-05-24 08:51:44 +05:30
5903849388 Added Optional configuration file (#338)
* Added optional configuration file loading

* First commit of optional configuration file

This file is OPTIONAL.
If this file is not present in your webserver, tinyfilemanager will works with its internal configuration.

* removed define

define is not a configuration
2020-05-24 08:50:49 +05:30
0826838917 Add support user customized config file (if exists) (#242)
* feat(/): add support user customized config file (if exists)

* Show current process ID in Status bar + Make fm_get_filesize function much more concise (#245)

* Update Simplified Chinese (#241)

* Feature Font Size Choose Options / Bug Fix Settings not visible in auth=false (#240)

* Bug fix and PR #245, #241, #240

Co-authored-by: 刘明野 <898310895@qq.com>
Co-authored-by: B Bharath Kumar Reddy <39063133+bbharathkumarreddy@users.noreply.github.com>
Co-authored-by: Prasath Mani <prasath.mani@publicissapient.com>
Co-authored-by: Prasath Mani <prasathmani@users.noreply.github.com>
2020-05-24 08:50:25 +05:30
a0c595a8e1 Security fix #357
Download file causes timeout #353
Download Restart @ 88% #312
download large file issues #259
File upload issue #354
FIle Upload URL error #360
Bug in .tar archive extraction when destination(s) file(s) already exist (HTTP error 500) #332
Backup File return false #201
2020-05-18 13:37:02 +05:30
1482e41f74 fix settings are not saved. (#361) 2020-05-18 09:45:54 +05:30
dcdf736e48 Add Japanese Translation (#359) 2020-05-16 17:10:03 +05:30
43eb8016d3 Update SECURITY.md 2020-05-14 08:57:29 +05:30
e2ac1163c2 Update SECURITY.md 2020-05-14 08:57:12 +05:30
2f357ee3d5 Fix translation error (#349) 2020-04-29 12:35:19 +05:30
5933952fa4 Add Korean translations (#347) 2020-04-28 06:00:07 +05:30
1ca011ca67 Added duplicate functionality (#146)
* Added duplicate functionality

* Updated functionality to also duplicate folders

* Merged copy & duplicate buttons
2020-03-23 19:31:44 +05:30
e259ffda4d Update tinyfilemanager.php (#327) 2020-03-20 07:55:51 +05:30
e8fc6d546a fix "Archive not created" error (#317)
fix "Archive not created" error while trying to create Tar archive
2020-03-12 12:48:19 +05:30
1501835f61 Update tinyfilemanager.php (#309)
Login box stays middle on small screens
2020-02-24 11:39:53 +05:30
c991555de5 Avoid accessing undefined $_POST['file'] index (#308)
I don't know when this occurs, but I have this entry in my web server log:
 PHP Notice:  Undefined index: file in tinyfilemanager.php on line 1165
2020-02-18 22:46:21 +05:30
9e3877270b Advanced Search
Mouse hover image preview
Upload error handling
Thumbnail view for folders containing images #283
How to search inside folders. #282
Search bar with regex matching #140
Subfolder Search Feature #132
2020-01-14 17:57:32 +05:30
0319b7b102 feat(/): add live image preview when user hovers the image file name (only when the number of files in current folder less than 500 files) (#244)
Co-authored-by: Prasath Mani <prasathmani@users.noreply.github.com>
2020-01-14 17:44:52 +05:30
4905e5c61c Adds Slovak translation (#279) 2020-01-09 13:12:01 +05:30
8b21009a47 Fix tiny typo (#276) 2020-01-06 07:46:43 +05:30
b8b859a1fd Update README.md 2020-01-01 20:12:17 +05:30
339c26168c Update FUNDING.yml 2020-01-01 16:28:09 +05:30
1c86942097 Redesign login screen, Removed remember me checkbox, Security vulnerability fix #270, User role have Preview and Search option #265, #222 2019-12-29 10:30:23 +05:30
9a499734c5 Merge pull request from GHSA-w72h-v37j-rrwr
* Fix the RCE vuln via Upload from URL

This commit attemps to fix the Remote Code Execution
(authenticated) via Upload from URL. Some notes about
the proposed solution:

* A new function (fm_is_file_allowed) has been created to
validate if the filename is allowed. This function gets the
the filename as parameter and returns true if it validates
as allowed. Otherwise returns false (the default).

* It's better to have such validatation(s) in one place
instead of spread all over the code. There are other places in
the application where the filename is validated and they should
all be refactored to call this function. Then we can focus
all needed validations in one place only!

NOTE: This refactoring was not done - the only goal was to fix
this security vulnerability only.

* The fm_is_file_allowed() function validates the filename
based on its extension only. No other validatation(s) have been
implemented in this commit.

* File extensions are assumed to be case-insensitive.
For example, php == PHP == Php == PhP, etc. This is consitent
with some web servers. Without this, the user will have to populate
the $allowed_extensions with all possible allowed combinations.

* Although, there is one drawback to the current solution, which
is that all files must have an extension to be uploaded. This is not
consitent with modern filesystems. Maybe a better solution would be
to automatically append an extension to the filename if no
extension has been found (e.g., .html or .txt which are generally
considered to be harmless). This must be decided by the
application's maintainers.

* Fix the RCE vulns via new/rename file

Sanitize the arguments to stat using escapeshellarg()

Co-authored-by: Jorge Morgado <jorge@morgado.ch>
2019-12-28 19:23:47 +05:30
1eac82f55a Create SECURITY.md 2019-12-27 21:41:49 +05:30
c2938925d8 Turkish language support (#269) 2019-12-27 11:42:02 +05:30
b84fdbf008 Compatible with macOS (#258) 2019-12-27 11:39:52 +05:30
7c376df205 Fix for search function not working if "$hide_Cols=true" on non-Windows systems (#267)
Setting $hide_Cols=true while having FM_IS_WIN=false will lead to a "Type error" when setting up the dataTable. The desired page is generated, but the Search function does not work, as the dataTable is broken.

With this fix the dataTable is written accordingly, with either FM_IS_WIN or $hide_Cols set or unset.
2019-12-20 14:50:57 +05:30
7a7a44de9b Open document files? #262 2019-12-06 16:26:36 +05:30
3e19ba0243 No message / status / information when saving edited file #257 and when saving an edit show a warning ( alert ) #213 2019-11-29 12:26:25 +05:30
bf8b715c13 Notice Error. #252 2019-11-15 12:21:31 +05:30
4a8bd014af Bug fix and PR #245, #241, #240 2019-11-05 16:50:15 +05:30
a5b2b459cd Feature Font Size Choose Options / Bug Fix Settings not visible in auth=false (#240) 2019-11-05 16:32:25 +05:30
4f2eecc108 Update Simplified Chinese (#241) 2019-11-05 16:31:29 +05:30
13e130c29f Show current process ID in Status bar + Make fm_get_filesize function much more concise (#245) 2019-11-05 16:27:57 +05:30
57ac3391e5 Fixed help links (#238) 2019-10-04 12:44:05 +05:30
29ca36a18b Missing select all feature ? #234 2019-10-01 16:20:30 +05:30
c76a3a2fc5 Updated new version vendor cdn links and Fixed - Bug when filename contains a space at the beginning #198 2019-09-24 18:17:09 +05:30
0cb8ad86a5 Update README.md 2019-09-23 10:23:10 +05:30
567fcb6a25 Adding the Persian language by Max Base (#217)
Add Persian, Farsi Language. (فارسی)
Max Base, Asrez Team
2019-09-03 11:25:21 +05:30
4353cc7378 Remove duplicate and format file 2019-08-24 14:55:20 +05:30
a0a7ceeea0 Add +PT (#208) 2019-08-24 14:49:28 +05:30
73abdcdaad echo "Folder" (#209)
{ echo "Folder"; } > { echo lng('Folder'); }
2019-08-23 08:12:57 +05:30
059c70e05e Update tinyfilemanager.php (#206)
FastCGI sent in stderr: "PHP message: PHP Warning:  Use of undefined constant online_viewer - assumed 'online_viewer' (this will throw an Error in a future version of PHP) in /www/admin/index.php on line 1383
2019-08-22 11:26:32 +05:30
8b6a984864 Merge branch 'master' of https://github.com/prasathmani/tinyfilemanager 2019-07-31 09:39:31 +05:30
c18051dd5b File upload error: uppercase and strtolower() #202 2019-07-31 09:39:02 +05:30
d593cefde7 Create FUNDING.yml 2019-07-27 09:42:10 +05:30
b6f552a79c Cannot edit aspx File #200 2019-07-26 17:07:57 +05:30
3114fa92e3 Some language strings are missing. And other... #192
view file is insecure #187
Get files size (recursive) #186
There is no possibility for translation for some hints (title =) #185
View dirSize instead of word "Folder" #184
Document type detection #183
Stored Cross-site Scripting (XSS) Vulnerability detected in File Names #180
strings in code #177
Remove tracking #164
2019-07-23 12:56:01 +05:30
21094a66ee Fix spelling of "copyied" after copying file (#196)
Should be "copied".
2019-07-23 09:42:22 +05:30
5386b89aaf Update tinyfilemanager.php (#194) 2019-07-23 09:42:00 +05:30
b579489148 Update translation.json (#193)
Please add Czech translation
2019-07-23 09:41:13 +05:30
9131db13a7 Updated italian translation (#182)
Added also "Move" that was missing in the file.
2019-07-23 09:40:47 +05:30
8d40ebcdd7 Improve Multilanguage Support (#179)
* Add Arabic Translation

* add some keywords and handling Fixed keywords [untranslated]

* add new translation words

* improve existing translation words
2019-07-23 09:40:26 +05:30
ea29092aea Add Save by ajax request (#175)
Add Save by ajax request, Instead of saving it to a post request and reloading the page each time.
2019-07-23 09:39:00 +05:30
1696ebf0fc IP whitelisting and/or blacklisting #171
Add Microsoft Office online view option #169
2019-05-19 12:31:49 +05:30
ffc34859cc Add Hebrew Language (#174)
Add Hebrew Language
2019-05-19 11:13:58 +05:30
9d472720a9 Add Arabic Translation (#176) 2019-05-19 11:10:56 +05:30
498804f8a5 Basic IP white- and blacklisting (#178) 2019-05-19 11:10:20 +05:30
4b4b48242e PHP Warning: count() #173 2019-05-13 15:59:02 +05:30
f67a343f48 When uploading it doesnt override, insteads it crates a new filename #172
Add Custom Title and Favicon options #156
2019-05-13 15:48:29 +05:30
f956ae3abc Add Custom Title and Favicon options (#156)
Added variables so the admin can set a custom title and favicon.
2019-05-07 15:13:37 +05:30
7a9730dfe1 Added .MKV format support and minor ui changes, #163. 2019-05-03 16:47:35 +05:30
62e58a6597 add vietnamese language (#162) 2019-05-03 12:40:36 +05:30
0c5ee15ea3 Update translation.json (#151) 2019-05-03 12:38:45 +05:30
ae971c8b99 Fix for path traversal vulnerability, reported by - @hhc0null/Hiroki MATSUKUMA 2019-04-03 17:20:23 +05:30
b546ac168e Add Polish language (#150) 2019-04-03 17:12:55 +05:30
285b6b4882 Provide "previous" and "next" to navigate between previews #145
Cross site scripting (XSS) #141
RegEx error | function template #134
2019-03-28 17:06:42 +05:30
a8c2fc66d6 prevent overwriting if uploaded file already exists #138,
IE11 aborts upload after 30s #137
2019-03-13 12:26:25 +05:30
622264042a Negative filesize on ARMv7 for files over 2GB #127
Max file size? #96
2019-03-03 15:30:47 +05:30
bb0e61787c Merge branch 'master' of https://github.com/prasathmani/tinyfilemanager 2019-02-28 15:35:40 +05:30
da31717cff Negative filesize on ARMv7 for files over 2GB #127
Simplified Chinese translation #125
Max file size? #96
2019-02-28 15:35:28 +05:30
1b9e0f5e76 Português language added (#126) 2019-02-18 14:59:29 +05:30
e0cc54b286 Add Simplified Chinese support (#122)
* Add Simplified Chinese support

And distinguish it from Traditional Chinese.

* Add two fields for translation.

* Add two fields for translation.

* Translated.
2019-01-28 22:24:05 +05:30
7a0de24a61 Fix : User's sub folder problem #120 2019-01-20 17:02:01 +05:30
1a24dc0729 Merge branch 'master' of https://github.com/prasathmani/tinyfilemanager 2019-01-18 17:12:35 +05:30
2a390b2247 down file error when larger than php memory limited #110 and Not looking good on phones #93 2019-01-18 17:12:20 +05:30
292c00d62f Merge pull request #119 from karavidas/master
Greek laguage added
2019-01-17 18:42:16 +05:30
30aa3e6f96 Update translation.json 2019-01-17 15:11:03 +02:00
200f56e8d4 Greek laguage added 2019-01-17 12:35:43 +02:00
09f688c625 Saving settings doesn't save #116 2019-01-17 12:34:54 +05:30
f26977adb3 Default Languages loading issue fix 2019-01-10 16:23:02 +05:30
704bec368f Merge pull request #115 from adit/patch-1
added Indonesia Language
2019-01-06 20:17:09 +05:30
6970bdb7dd add indonesia lang. 2019-01-06 21:37:40 +07:00
8802b048b3 Added Version Check
Added new Translation JSON file
New languages added - Spanish, German, Thailand and Chinese
Removed languages from tinyfilemanager.php file
Updated IDE languages and themes
2019-01-06 16:59:02 +05:30
e38f312ce5 Merge pull request #112 from jopiortiz/spanish-lang
Spanish Language
2019-01-06 15:44:22 +05:30
125e35ed83 Merge branch 'master' into spanish-lang 2019-01-06 15:44:09 +05:30
bf64ae9593 Merge pull request #100 from mrwan200/master
Add Thai Language
2019-01-06 15:41:59 +05:30
98902b6b80 Merge branch 'master' into master 2019-01-06 15:41:38 +05:30
380a6f2877 Merge pull request #104 from emilengler/master
Add German language
2019-01-06 15:39:46 +05:30
373d04b2ef Crear , looks better 2019-01-04 01:03:30 -03:00
c7708f371f Spanish Language
- Minor fix on the Search input placeholder
2019-01-04 00:32:28 -03:00
ba9826fe9c Added check latest version 2018-12-31 14:36:03 +05:30
221bc96882 Added Partition size and Memory used #111 2018-12-25 21:48:41 +05:30
acf1958350 Merge pull request #111 from alecos71/patch-12
Added Memory Used
2018-12-25 20:15:37 +05:30
90c079882d improved memory usage + added translations
improved memory usage + added translations
2018-12-25 15:11:20 +01:00
c22e694e7d improved memory usage
improved memory usage
2018-12-25 14:32:03 +01:00
8f9da1cb5e Added Memory Used
Added Memory Used
2018-12-25 14:12:58 +01:00
c413573952 Improve embed and UI issues 2018-12-22 14:51:06 +05:30
89fb960679 Modified UI - Pwd change 2018-12-14 01:20:25 +05:30
fb7c4fcebd Modified UI - file upload from url #98 and Code refactor 2018-12-14 00:02:25 +05:30
1760168933 Modified Readme 2018-12-13 00:40:23 +05:30
9fdfdbfe94 Added - file upload from url #98
Fix: issues to rename files with single quote #105
Fix: Dropzone default timeout 30 seconds #102, #96, #75
Fix:  XSS cross-site attack screen (Chrome) #101
2018-12-13 00:38:16 +05:30
876282d006 Add German language 2018-12-10 18:22:24 +01:00
f7240516ca Update tinyfilemanager.php 2018-12-09 09:39:33 +07:00
1a9bf95920 Fix: Not looking good on phones #93 2018-12-06 12:51:29 +05:30
9eda119235 Added Editor Toolbar - Themes, Document Mode, Search, Fullscreen, Undo, Redo, ... 2018-12-03 23:58:25 +05:30
1ca5add891 Added Russian Language 2018-12-02 14:49:04 +05:30
4f40e85604 Fix: Not looking good on phones #93 2018-12-01 13:58:28 +05:30
39bec20b7e Fix: undefined constant password_verify #87 and #92, #91 2018-12-01 08:43:24 +05:30
8113184b12 Merge pull request #90 from alecos71/patch-9
fixed $tr['en'] with $tr['it']
2018-11-30 09:48:10 +05:30
479a4a873d Added language entry in list
Added language entry in list
2018-11-29 19:40:24 +01:00
7f1258c050 fixed $tr['en'] with $tr['it']
Fixed Italian language
2018-11-29 19:20:44 +01:00
b995d781fb Merge pull request #89 from simon511000/patch-1
Update tinyfilemanager.php
2018-11-29 22:20:57 +05:30
c1b8bfd6ad Update tinyfilemanager.php 2018-11-29 17:31:57 +01:00
81f6c81aa8 Merge pull request #88 from alecos71/patch-8
Update tinyfilemanager with Italian Language
2018-11-29 21:37:33 +05:30
0c0d9e24b8 Update tinyfilemanager.php
Added Italian language
2018-11-29 16:06:41 +01:00
f3e2a0bdb2 Multi-language support #2.2.0 2018-11-26 23:56:01 +05:30
1f9b2f6b71 Multi-language support #2.2.0 2018-11-26 23:47:58 +05:30
f54e269f7e Update README.md 2018-11-24 00:03:55 +05:30
ad65b778a2 Add Beerpay's badge 2018-11-23 23:52:41 +05:30
764c80d4a9 Merge branch 'master' of https://github.com/prasathmani/tinyfilemanager 2018-11-20 17:52:39 +05:30
1accf6739a Normal Text Editor Design Modified 2018-11-20 17:52:13 +05:30
b19f325e8e Merge pull request #82 from gbrault/master
Corrected spelling thnaks 2 @gbrault
2018-11-20 17:21:17 +05:30
66115cf3c9 Corrected spelling 2018-11-20 12:42:29 +01:00
83a5f1d7b8 Fix : Some bugs about showing up log of button from nowhere and search box bug #81 2018-11-20 12:34:47 +05:30
2510e595aa Logo path updated 2018-11-19 23:40:23 +05:30
df7312e3c0 Merge pull request #80 from FH3095/master
Fix Undefined variable _SESSION notice
2018-11-16 10:28:33 +05:30
1a28a09426 Fix Undefined variable _SESSION notice 2018-11-15 13:34:40 +01:00
0d8c314146 Subdirectory search does not work #76 2018-11-14 18:05:39 +05:30
5b02c47f3c - Login Page redesign
- Error report suggestion #77
- Rename allowed based on FM_EXTENSION config
- Tar file support added (create, open and extract tar)
- Upload UI resdesign
- Table header UI Redesign
- Login user name and avatar added
- Broken URL highlight.js #78 and #79
2018-11-14 17:07:16 +05:30
b0d0400267 Added error reporting zero to hide error. 2018-11-08 16:40:58 +05:30
8e6b3f288c CDN version updated and code optimized 2018-11-05 18:56:35 +05:30
604323c3f5 Updated Readme 2018-11-02 17:58:53 +05:30
07151e1643 Added Google Docs Viewer 2018-11-02 17:48:54 +05:30
9b5e70587e Added DataTable JS to sort and search data faster #3 2018-11-02 14:20:13 +05:30
cb04b5770a Updated Readme with Demo URL 2018-10-27 22:07:27 +05:30
9eb9280d6c #71 - Added Password hash 2018-10-27 22:06:48 +05:30
25f5ce7d4f Update README.MD 2018-10-18 14:38:38 +05:30
1bf7621b38 Hide files and folders form listing Fix - #59 2018-10-18 14:33:22 +05:30
ba41b79f1a Delete _config.yml 2018-10-17 10:32:15 +05:30
a1669b8166 Set theme jekyll-theme-cayman 2018-10-17 10:17:08 +05:30
7 changed files with 3874 additions and 1142 deletions

6
.github/FUNDING.yml vendored Normal file
View File

@ -0,0 +1,6 @@
# These are supported funding model platforms
patreon: ccpprogrammers
open_collective: tinyfilemanager
ko_fi: tinyfilemanager
custom: ['https://paypal.me/prasathmani']

View File

@ -1,60 +1,67 @@
# Tiny PHP File Manager
It is a simple, fast and small file manager with single php file. It is also a web code editor. It'll run either online or locally, on Linux, Windows or Mac based platforms. The only requirement is to have PHP 5+ available.
<hr>
<img src="screenshot.gif" alt="H3K | Tiny File Manager">
# Tiny File Manager
[![Live demo](https://img.shields.io/badge/Live-Demo-brightgreen.svg?style=flat-square)](https://tinyfilemanager.github.io/demo/)
[![Live demo](https://img.shields.io/badge/Help-Docs-lightgrey.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/wiki)
[![GitHub Release](https://img.shields.io/github/release/qubyte/rubidium.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/releases)
[![GitHub License](https://img.shields.io/github/license/prasathmani/tinyfilemanager.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/blob/master/LICENSE)
[![Paypal](https://img.shields.io/badge/Donate-Paypal-lightgrey.svg?style=flat-square)](https://www.paypal.me/prasathmani)
> TinyFileManager is web based file manager and it is a simple, fast and small file manager with a single file, multi-language ready web application for storing, uploading, editing and managing files and folders online via web browser. The Application runs on PHP 5.5+, It allows the creation of multiple users and each user can have its own directory and a build-in support for managing text files with cloud9 IDE and it supports syntax highlighting for over 150+ languages and over 35+ themes.
## Demo
[Demo](https://tinyfilemanager.github.io/demo/)
Login Details : admin/admin@123 | user/12345
## Documentation
Tinyfilemanager is highly documented on the [wiki pages](https://github.com/prasathmani/tinyfilemanager/wiki).
[![Tiny File Manager](screenshot.gif)](screenshot.gif)
## Requirements
- PHP 5.5.0 or higher.
- [Zip extension](http://php.net/manual/en/book.zip.php) for zip and unzip actions.
- Fileinfo, iconv and mbstring extensions are strongly recommended.
- Fileinfo, iconv, zip, tar and mbstring extensions are strongly recommended.
## How to use
Download ZIP with latest version from master branch.
Copy tinyfilemanager.php to your website folder and open it with web browser (e.g. http://yoursite/any_path/tinyfilemanager.php).
Just copy the tinyfilemanager.php to your webspace - thats all :)
You can also change the file name from "tinyfilemanager.php" to something else, you know what i meant for.
Default username/password: admin/admin and user/12345.
Default username/password: **admin/admin@123** and **user/12345**.
Warning: Please set your own username and password in $auth_users before use.
:warning: Warning: Please set your own username and password in `$auth_users` before use. password is encrypted with <code>password_hash()</code>. to generate new password hash [here](https://tinyfilemanager.github.io/docs/pwd.html)
To enable/disable authentication set $use_auth to true or false.
### Supported constants:
- `FM_ROOT_PATH` - default is `$_SERVER['DOCUMENT_ROOT']`
- `FM_ROOT_URL` - default is `'http(s)://site.domain/'`
- `FM_SELF_URL` - default is `'http(s)://site.domain/' . $_SERVER['PHP_SELF']`
- `FM_ICONV_INPUT_ENC` - default is `'CP1251'`
- `FM_USE_HIGHLIGHTJS` - default is `true`
- `FM_HIGHLIGHTJS_STYLE` - default is `'vs'`
- `FM_DATETIME_FORMAT` - default is `'d.m.y H:i'`
- `FM_EXTENSION` - default is `""` //upload files extensions
- `FM_TREEVIEW` - default is `false`
To enable/disable authentication set `$use_auth` to true or false.
### :loudspeaker: Features
<ul>
<li>:cd: Open Source, light and extremely simple</li>
<li>:information_source: Basic features likes Create, Delete, Modify, View, Download, Copy and Move files </li>
<li>:arrow_double_up: Ajax Upload, Ability to drag & drop, multiple files upload and file extensions filter </li>
<li>:file_folder: Ability to create folders and files</li>
<li>:gift: Ability to compress, extract files</li>
<li>:sunglasses: Support user permissions - based on session and each user root folder mapping</li>
<li>:floppy_disk: Copy direct file URL</li>
<li>:pencil2: Edit text formats file using advanced editor</li>
<li>:zap: Backup files</li>
<li>:mag_right: Search - Advanced Ajax based seach</li>
<li>:file_folder: Exclude folders from listing</li>
<li>:bangbang: lots more...</li>
</ul>
### CDN Used
- :cd: Open Source, light and extremely simple
- :iphone: Mobile friendly view for touch devices
- :information_source: Basic features likes Create, Delete, Modify, View, Quick Preview, Download, Copy and Move files
- :arrow_double_up: Ajax Upload, Ability to drag & drop, upload from URL, multiple files upload with file extensions filter
- :file_folder: Ability to create folders and files
- :gift: Ability to compress, extract files (`zip`, `tar`)
- :sunglasses: Support user permissions - based on session and each user root folder mapping
- :floppy_disk: Copy direct file URL
- :pencil2: Cloud9 IDE - Syntax highlighting for over `150+` languages, Over `35+` themes with your favorite programming style
- :page_facing_up: Google/Microsoft doc viewer helps you preview `PDF/DOC/XLS/PPT/etc`. 25 MB can be previewed with the Google Drive viewer
- :zap: Backup files and IP blacklist and whitelist
- :mag_right: Search - Search and filter files using `datatable js`
- :file_folder: Exclude folders and files from listing
- :globe_with_meridians: Multi-language(20+) support and for translations `translation.json` is file required
- :bangbang: lots more...
- jQuery
- Bootstrap
- Font Awesome
- Highlight.js
- ace.js
- DropZone.js
### <a name=license></a>License, Credit
- Available under the [GNU license](https://github.com/prasathmani/tinyfilemanager/blob/master/LICENSE)
- Original concept and development by github.com/alexantr/filemanager
- CDN Used - _jQuery, Bootstrap, Font Awesome, Highlight js, ace js, DropZone js, ekko-lightbox js, and DataTable js_
- To report a bug or request a feature, please file an [issue](https://github.com/prasathmani/tinyfilemanager/issues)
- [Contributors](https://github.com/prasathmani/tinyfilemanager/wiki/Authors-and-Contributors)

27
SECURITY.md Normal file
View File

@ -0,0 +1,27 @@
# Security Policy
## Reporting a Vulnerability
The team takes security bugs seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
To report a security issue, email ccpprogrammers[at]gmail.com and include the word "SECURITY" in the subject line.
The team will send a response indicating the next steps in handling your report. After the initial reply to your report you will be kept informed of the progress towards a fix and full announcement.
Report security bugs in third-party modules to the person or team maintaining the module.
## Disclosure Policy
When the security team receives a security bug report, they will assign it to a
primary handler. This person will coordinate the fix and release process,
involving the following steps:
* Confirm the problem and determine the affected versions.
* Audit code to find any potential similar problems.
* Prepare fixes for all releases still under maintenance. These fixes will be
released as fast as possible to npm.
## Comments on this Policy
If you have suggestions on how this process could be improved please submit a
pull request.

133
config.php Normal file
View File

@ -0,0 +1,133 @@
<?php
/*
#################################################################################################################
This is an OPTIONAL configuration file.
The role of this file is to make updating of "tinyfilemanager.php" easier.
So you can:
-Feel free to remove completely this file and configure "tinyfilemanager.php" as a single file application.
or
-Put inside this file all the static configuration you want and forgot to configure "tinyfilemanager.php".
#################################################################################################################
*/
// Auth with login/password
// set true/false to enable/disable it
// Is independent from IP white- and blacklisting
$use_auth = true;
// Auth with login/password
// set true/false to enable/disable it
// Is independent from IP white- and blacklisting
$use_auth = true;
// Login user name and password
// Users: array('Username' => 'Password', 'Username2' => 'Password2', ...)
// Generate secure password hash - https://tinyfilemanager.github.io/docs/pwd.html
$auth_users = array(
'admin' => '$2y$10$/K.hjNr84lLNDt8fTXjoI.DBp6PpeyoJ.mGwrrLuCZfAwfSAGqhOW', //admin@123
'user' => '$2y$10$Fg6Dz8oH9fPoZ2jJan5tZuv6Z4Kp7avtQ9bDfrdRntXtPeiMAZyGO' //12345
);
//set application theme
//options - 'light' and 'dark'
$theme = 'light';
// Readonly users
// e.g. array('users', 'guest', ...)
$readonly_users = array(
'user'
);
// Enable highlight.js (https://highlightjs.org/) on view's page
$use_highlightjs = true;
// highlight.js style
// for dark theme use 'ir-black'
$highlightjs_style = 'vs';
// Enable ace.js (https://ace.c9.io/) on view's page
$edit_files = true;
// Default timezone for date() and time()
// Doc - http://php.net/manual/en/timezones.php
$default_timezone = 'Etc/UTC'; // UTC
// Root path for file manager
// use absolute path of directory i.e: '/var/www/folder' or $_SERVER['DOCUMENT_ROOT'].'/folder'
$root_path = $_SERVER['DOCUMENT_ROOT'];
// Root url for links in file manager.Relative to $http_host. Variants: '', 'path/to/subfolder'
// Will not working if $root_path will be outside of server document root
$root_url = '';
// Server hostname. Can set manually if wrong
$http_host = $_SERVER['HTTP_HOST'];
// user specific directories
// array('Username' => 'Directory path', 'Username2' => 'Directory path', ...)
$directories_users = array();
// input encoding for iconv
$iconv_input_encoding = 'UTF-8';
// date() format for file modification date
// Doc - https://www.php.net/manual/en/function.date.php
$datetime_format = 'd.m.y H:i';
// Allowed file extensions for create and rename files
// e.g. 'txt,html,css,js'
$allowed_file_extensions = '';
// Allowed file extensions for upload files
// e.g. 'gif,png,jpg,html,txt'
$allowed_upload_extensions = '';
// Favicon path. This can be either a full url to an .PNG image, or a path based on the document root.
// full path, e.g http://example.com/favicon.png
// local path, e.g images/icons/favicon.png
$favicon_path = '?img=favicon';
// Files and folders to excluded from listing
// e.g. array('myfile.html', 'personal-folder', '*.php', ...)
$exclude_items = array();
// Online office Docs Viewer
// Availabe rules are 'google', 'microsoft' or false
// google => View documents using Google Docs Viewer
// microsoft => View documents using Microsoft Web Apps Viewer
// false => disable online doc viewer
$online_viewer = 'google';
// Sticky Nav bar
// true => enable sticky header
// false => disable sticky header
$sticky_navbar = true;
// max upload file size
$max_upload_size_bytes = 2048;
// Possible rules are 'OFF', 'AND' or 'OR'
// OFF => Don't check connection IP, defaults to OFF
// AND => Connection must be on the whitelist, and not on the blacklist
// OR => Connection must be on the whitelist, or not on the blacklist
$ip_ruleset = 'OFF';
// Should users be notified of their block?
$ip_silent = true;
// IP-addresses, both ipv4 and ipv6
$ip_whitelist = array(
'127.0.0.1', // local ipv4
'::1' // local ipv6
);
// IP-addresses, both ipv4 and ipv6
$ip_blacklist = array(
'0.0.0.0', // non-routable meta ipv4
'::' // non-routable meta ipv6
);
?>

Binary file not shown.

Before

Width:  |  Height:  |  Size: 474 KiB

After

Width:  |  Height:  |  Size: 209 KiB

File diff suppressed because one or more lines are too long

1419
translation.json Normal file

File diff suppressed because it is too large Load Diff