Browse Source

Fix advanced search issue for read-only user (#785)

$_POST['type']=="search" not reachable if FM_READONLY is true
master
Apichart F 4 weeks ago committed by GitHub
parent
commit
50ccd29623
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 18
      tinyfilemanager.php

18
tinyfilemanager.php

@ -456,14 +456,6 @@ if (isset($_POST['ajax']) && !FM_READONLY) {
die(true);
}
//search : get list of files from the current folder
if(isset($_POST['type']) && $_POST['type']=="search") {
$dir = FM_ROOT_PATH;
$response = scan(fm_clean_path($_POST['path']), $_POST['content']);
echo json_encode($response);
exit();
}
// backup files
if (isset($_POST['type']) && $_POST['type'] == "backup" && !empty($_POST['file'])) {
$fileName = $_POST['file'];
@ -632,6 +624,16 @@ if (isset($_POST['ajax']) && !FM_READONLY) {
exit();
}
if (isset($_POST['ajax'])) {
//search : get list of files from the current folder
if(isset($_POST['type']) && $_POST['type']=="search") {
$dir = FM_ROOT_PATH;
$response = scan(fm_clean_path($_POST['path']), $_POST['content']);
echo json_encode($response);
exit();
}
}
// Delete file / folder
if (isset($_GET['del']) && !FM_READONLY) {
$del = str_replace( '/', '', fm_clean_path( $_GET['del'] ) );

Loading…
Cancel
Save