Commit graph

196 commits

Author SHA1 Message Date
Dmitry Efremov dd1ba6795c
Fixes ajax ability to handle requests when auth disabled (#952) 2023-01-25 08:23:45 +05:30
Dmitry Efremov 9c4d30d7b5
Fixes couple issues with confirmDailog (#951)
* Fixes naming for confirmDailog id, otherwise dialog won't work

* Removes destroying form as browser complains that it can't process request from disconnected form
2023-01-25 08:22:27 +05:30
Prasath Mani dc529dd590
Fix save settings not working #947 2023-01-22 02:06:14 +05:30
fbotp 69ccd952fc
Bug fix: Delete confirm dialog will work wrong aflter cancel. (#942)
* Bug fix: Only delete first file/directory when clicking the delete button multiple times and canceling.

* Add variable name for delete dialog
2023-01-19 21:41:48 +05:30
Catalin 69495db9b4
Subfolder links fix (#945)
Download and Direct link problems when using with a subfolder, possible simple solution.
2023-01-19 21:41:00 +05:30
Prasath Mani 789b98f136 Download and Direct link problems when using with a subfolder. #907 2022-12-03 06:17:55 +00:00
Prasath Mani 8f2f65b9fc Bug Fix #904, #903, #900 2022-12-02 02:43:24 +00:00
武志伟 31b988db79
Translation supplement (#902)
* update zh-cn lang

* Translation supplement

* update zh-cn lang
2022-11-30 16:40:57 +05:30
Nguyễn Trần Chung 5a00707890
Update tinyfilemanager.php (#898) 2022-11-27 20:59:39 +05:30
muink cfb9a57d5e
Fix the problem of login failure when $root_url is defined (#896)
Fix the problem that `FM_ROOT_URL` and `$_SERVER['REQUEST_URI']` are repeated, causing login redirection to fail when `$root_url` is defined
2022-11-26 18:52:34 +05:30
Prasath Mani e30ec1dfd2 update download buffer and fix #893 2022-11-25 07:00:19 +00:00
Prasath Mani 610cea8ecd Fix - #739, #887, #886, #884, #835 2022-11-25 03:09:46 +00:00
Michele Locati f20d3e9e06
Fix phpdoc types (#890) 2022-11-23 22:07:04 +05:30
Prasath Mani e5c78e8ab9 cosmetic changes and dark theme color update 2022-11-20 19:01:08 +05:30
Prasath Mani f8cedbcf59 Fix Security related issues 2022-11-20 16:59:29 +05:30
Prasath Mani df80b73436 Refactor Code and Update Doc 2022-11-20 15:04:25 +05:30
Prasath Mani 8de16a4c8a Major update on security, improved UI and bug fix. 2022-11-19 19:55:39 +00:00
Prasath Mani 4d8d4a3aba
Update tinyfilemanager.php 2022-11-07 22:48:15 +05:30
Prasath Mani fce0f5bacb Fix warning message 2022-11-07 22:42:07 +05:30
llcool 59c6b9b26a
Downloading file - PHP warning loop "Permission denied" (#879)
* Bugfix: Stop looping error when downloading a file with no access.

* Delete .history directory

ignore .history
2022-11-07 22:24:56 +05:30
Rizky be49a13b8e
Fixes advanced search not working. (#878)
Fix #869
2022-11-07 22:23:01 +05:30
ririko5834 2c0e6d216e
Update tinyfilemanager.php (#874) 2022-10-31 21:19:21 +05:30
Prasath Mani 805308a013
remove latest version checker 2022-09-01 16:25:29 +05:30
Dmitry Efremov 2eb00ab3de
Adds json mime type as text type to allow edit json files (#841) 2022-08-25 09:50:39 +05:30
Agent Smith 74727fe48a
Add webm to videos (#833) 2022-08-06 11:17:47 +05:30
Sebjugate 3a3033bdce
Added .yml, .yaml and .toml extensions. (#816)
These are common config file extensions.
2022-07-14 07:16:02 +05:30
zedzhen afe1227caa
Update russia translate and fix bug (#815)
* fix bug

if $calc_folder is enabled and there are insufficient permissions for one of the subfolders, then "PHP Fatal error: Uncaught RuntimeException: SplFileInfo::getSize()"

* lng() update

added lng() and delete unesed

* update russia translate
2022-07-14 07:14:54 +05:30
Saied cda40e22f1
More accurate ip recognition (#807) (#813) 2022-07-14 07:13:49 +05:30
Michael Horstmann b24887d4fd
Removed unused function (#806)
To fix: Undefined constant 'FM_EXTENSION'
2022-07-07 12:01:02 +05:30
Prasath Mani 17de8af81b PHP "divide by zero" error when unzipping 0 byte (very small) .zip files #803 2022-06-29 02:14:35 +00:00
Apichart F 50ccd29623
Fix advanced search issue for read-only user (#785)
$_POST['type']=="search" not reachable if FM_READONLY is true
2022-05-27 11:06:25 +05:30
Tanner 04c1d45b5f
resolve sorting issues, keep back button at top (#779) 2022-05-05 03:51:21 +05:30
Prasath Mani ca94f23c47
Update tinyfilemanager.php 2022-04-18 12:51:55 +05:30
mclorch a65f8ff8b5
fix download Content-Type header (#770) 2022-04-11 13:39:51 +05:30
Michael Milette 9b2bb18acb
Optimized and refactored fm_get_directorysize() function, and added validation. (#720) 2022-02-12 23:15:38 +05:30
Prasath Mani 7103691048 Fix - typo error #641 2022-02-12 13:54:22 +05:30
Prasath Mani 85821736c0 Update version 2022-02-12 13:48:19 +05:30
jicho e474ade92b
Client IP behind proxy (#665)
Function added for IP filtering when the filemanager is hosted behind a web proxy.

I've added a function for this to the file, not sure how else to implement it since everything is one file.
2022-02-12 13:28:26 +05:30
Daniel Kranich ad30a3a1f3
Add Global Readonly (#158)
Added a global readonly variable that will force readonly mode both when
not using the auth system and for all users if the auth system is being
used.

Co-authored-by: Prasath Mani <prasathmani@users.noreply.github.com>
2022-02-12 13:22:56 +05:30
Roni bb1d1d3801
added name of the file being edited (#542)
added name of the file being edited and a back button in a better location
2022-02-12 13:17:35 +05:30
Daniele Paganelli c3a2f1d604
Chunked file upload (#714)
Removes any PHP or server-side file-upload limits by using file chunks
2022-02-12 13:16:07 +05:30
joaogmauricio 154947ef83
apply fix to path traversal vulnerability (#718)
Co-authored-by: João Maurício <joao.goncalves.mauricio@pwc.com>
2022-02-12 10:34:05 +05:30
Enyedi Szilárd 3d28d8cb8e
Update tinyfilemanager.php (#707)
Changed "Folder is empty" message to be language-specific.
2022-01-28 07:43:56 +05:30
Roman Steiner 9b85951cfc
fix "400 bad request" when saving files (#705) 2022-01-21 08:06:27 +05:30
Suyadi 08cb4b0fce
Fix a non well formatted numeric value encountered & Notice: Undefined offset in fm_get_filesize() (#681)
For non `well formatted numeric value encountered`, see #670
For `Notice: Undefined offset 9` (current implementation result) see: https://3v4l.org/1qHit#v5.0.0
For new impementation result, see: https://3v4l.org/d0UBh#v5.0.0
2021-12-13 10:15:09 +05:30
Boris Delev 95d41a9518
Just a little fix with missing " in button HTML (#675)
Its a little html fix- its about 1787 line- the class value it not closed.
```
<button type="button" class="btn btn-sm btn-outline-primary name="Save"
```
changed to:

```
<button type="button" class="btn btn-sm btn-outline-primary" name="Save"
```
2021-12-03 07:16:32 +05:30
febinrev 2046bbde72
Patched the RCE (#636)
I have patched the file upload directory traversal to Authenticated Remote Code Execution Vulnerability.
2021-11-12 08:31:02 +05:30
Agent Smith 09e2b9a107
Fix saving of empty files (#612)
When you have a file without content, for example when you cleared you were unable to save it because of an incorrect if-statement. This is the fix for that problem.
2021-08-06 07:43:22 +05:30
Agent Smith 9ee41b14d6
Added some missing translations (#608) 2021-08-02 10:39:37 +05:30
schmigz 8158333d93
Update tinyfilemanager.php (#568)
fm_get_file_mimes() was causing errors for unknown extensions as it was causing an error as array element was not defined and return value was never checked.  According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Common_types and several other resources,  application/octet-stream is the default value for all other cases. An unknown file type should use this type.   I put a check in there to use that by default so a valid value is always returned.

It might be useful to replace this function with the  built-in PHP function mime_content_type() but that adds some additional dependencies as it does not always work out of the box with PHP.
2021-06-05 11:57:53 +05:30