Fixed Rename with folder quotes (#534 )

Fixed the Rename functionality to work with folders that contain single quotes in them by calling `addslashes` on the path.
Fix security issues #525 and #526
2021-04-30 05:57:10 +05:30 · 2021-04-22 13:41:35 +05:30 · 2021-03-22 18:26:55 +05:30 · 2021-02-24 13:33:57 +05:30 · 2021-02-24 12:37:38 +05:30 · 2021-02-23 11:47:57 +05:30
4 changed files with 374 additions and 249 deletions
--- a/README.md
+++ b/README.md
@@ -1,22 +1,22 @@
 # Tiny File Manager

-
 [![Live demo](https://img.shields.io/badge/Live-Demo-brightgreen.svg?style=flat-square)](https://tinyfilemanager.github.io/demo/)
 [![Live demo](https://img.shields.io/badge/Help-Docs-lightgrey.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/wiki)
 [![GitHub Release](https://img.shields.io/github/release/qubyte/rubidium.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/releases)
 [![GitHub License](https://img.shields.io/github/license/prasathmani/tinyfilemanager.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/blob/master/LICENSE)
 [![Paypal](https://img.shields.io/badge/Donate-Paypal-lightgrey.svg?style=flat-square)](https://www.paypal.me/prasathmani)
+
 > TinyFileManager is web based file manager and it is a simple, fast and small file manager with a single file, multi-language ready web application for storing, uploading, editing and managing files and folders online via web browser. The Application runs on PHP 5.5+, It allows the creation of multiple users and each user can have its own directory and a build-in support for managing text files with cloud9 IDE and it supports syntax highlighting for over 150+ languages and over 35+ themes.

 ## Demo
+
 [Demo](https://tinyfilemanager.github.io/demo/)

 Login Details : admin/admin@123 | user/12345

-
 ## Documentation
-Tinyfilemanager is highly documented on the [wiki pages](https://github.com/prasathmani/tinyfilemanager/wiki).

+Tinyfilemanager is highly documented on the [wiki pages](https://github.com/prasathmani/tinyfilemanager/wiki).

 [![Tiny File Manager](screenshot.gif)](screenshot.gif)

@@ -38,6 +38,7 @@ Default username/password: **admin/admin@123** and **user/12345**.

 To enable/disable authentication set `$use_auth` to true or false.

+:information_source: Rename the `config-sample.php` file into `config.php` to use configuration, it is an additional configuration file, Feel free to remove completely this file and configure "tinyfilemanager.php" as a single file application.

 ### :loudspeaker: Features

@@ -57,7 +58,6 @@ To enable/disable authentication set `$use_auth` to true or false.
 - :globe_with_meridians: Multi-language(20+) support and for translations `translation.json` is file required
 - :bangbang: lots more...

-
 ### <a name=license></a>License, Credit

 - Available under the [GNU license](https://github.com/prasathmani/tinyfilemanager/blob/master/LICENSE)
--- a/config-sample.php
+++ b/config-sample.php
@@ -2,7 +2,7 @@

 /*
 #################################################################################################################
-This is an OPTIONAL configuration file.
+This is an OPTIONAL configuration file. rename this file into config.php to use this configuration 
 The role of this file is to make updating of "tinyfilemanager.php" easier.
 So you can:
 -Feel free to remove completely this file and configure "tinyfilemanager.php" as a single file application.
@@ -24,16 +24,16 @@ $auth_users = array(
    'user' => '$2y$10$Fg6Dz8oH9fPoZ2jJan5tZuv6Z4Kp7avtQ9bDfrdRntXtPeiMAZyGO' //12345
 );

-//set application theme
-//options - 'light' and 'dark'
-$theme = 'light';
-
 // Readonly users
 // e.g. array('users', 'guest', ...)
 $readonly_users = array(
    'user'
 );

+//set application theme
+//options - 'light' and 'dark'
+$theme = 'light';
+
 // Enable highlight.js (https://highlightjs.org/) on view's page
 $use_highlightjs = true;

@@ -67,8 +67,8 @@ $directories_users = array();
 $iconv_input_encoding = 'UTF-8';

 // date() format for file modification date
-// Doc - https://www.php.net/manual/en/function.date.php
-$datetime_format = 'd.m.y H:i';
+// Doc - https://www.php.net/manual/en/datetime.format.php
+$datetime_format = 'd.m.y H:i:s';

 // Allowed file extensions for create and rename files
 // e.g. 'txt,html,css,js'
@@ -81,11 +81,11 @@ $allowed_upload_extensions = '';
 // Favicon path. This can be either a full url to an .PNG image, or a path based on the document root.
 // full path, e.g http://example.com/favicon.png
 // local path, e.g images/icons/favicon.png
-$favicon_path = '?img=favicon';
+$favicon_path = '';

 // Files and folders to excluded from listing
 // e.g. array('myfile.html', 'personal-folder', '*.php', ...)
-$exclude_items = array();
+$exclude_items = array('');

 // Online office Docs Viewer
 // Availabe rules are 'google', 'microsoft' or false
@@ -101,7 +101,7 @@ $sticky_navbar = true;


 // max upload file size
-$max_upload_size_bytes = 2048;
+$max_upload_size_bytes = 5000;

 // Possible rules are 'OFF', 'AND' or 'OR'
 // OFF => Don't check connection IP, defaults to OFF
--- a/tinyfilemanager.php
+++ b/tinyfilemanager.php
--- a/translation.json
+++ b/translation.json
@@ -1,7 +1,87 @@
 {
  "appName": "Tiny File Manager",
-  "version": "2.4.3",
+  "version": "2.4.5",
  "language": [
+    {
+      "name": "Norsk",
+      "code": "no",
+      "translation": {
+        "AppName": "Tiny File Manager",
+        "AppTitle": "Fil behandler",
+        "Login": "Logg inn",
+        "Username": "Brukernavn",
+        "Password": "Passord",
+        "Logout": "Logg ut",
+        "Move": "Flytt",
+        "Copy": "Kopier",
+        "Save": "Lagre",
+        "SelectAll": "Velg alt",
+        "UnSelectAll": "Av velg alt",
+        "File": "Fil",
+        "Back": "Tilbake",
+        "Size": "Størelse",
+        "Perms": "Uprawnienia",
+        "Modified": "Endret",
+        "Owner": "Eier",
+        "Search": "Søk",
+        "NewItem": "Ny",
+        "Folder": "Mappe",
+        "Delete": "Slett",
+        "Rename": "Gi nytt navn",
+        "CopyTo": "Kopier til",
+        "DirectLink": "Direktelink",
+        "UploadingFiles": "Laster opp filer",
+        "ChangePermissions": "Endre rettigheter",
+        "Copying": "Kopierer",
+        "CreateNewItem": "Lag ny",
+        "Name": "Navn",
+        "AdvancedEditor": "Avansert Tekstbehandler",
+        "RememberMe": "Husk meg",
+        "Actions": "Handlinger",
+        "Upload": "Last opp",
+        "Cancel": "Avbryt",
+        "InvertSelection": "Inverter valgte",
+        "DestinationFolder": "Målmappe",
+        "ItemType": "Filtype",
+        "ItemName": "Filnavn",
+        "CreateNow": "Lag nå",
+        "Download": "Last ned",
+        "Open": "Åpne",
+        "UnZip": "Pakk ut",
+        "UnZipToFolder": "Pakk ut til mappe",
+        "Edit": "Endre",
+        "NormalEditor": "Normal Tekstbehandler",
+        "BackUp": "Sikkerhetskopier",
+        "SourceFolder": "Kildemappe",
+        "Files": "Filer",
+        "Change": "Endre",
+        "Settings": "Instillinger",
+        "Language": "Språk",
+        "MemoryUsed": "Minne brukt",
+        "PartitionSize": "Partitions størrelse",
+        "ErrorReporting": "Error raportering",
+        "ShowHiddenFiles": "Vis skjulte filer",
+        "Full size": "Mappe størelse",
+        "Help": "Hjelp",
+        "Free of": "Ledig av",
+        "Preview": "Forhåndsvisning",
+        "Help Documents": "Help dokumenter",
+        "Report Issue": "Raporter problem",
+        "Generate": "Generer",
+        "FullSize": "Mappe størelse",
+        "FreeOf": "ledig av",
+        "CalculateFolderSize": "Kalkuler mappestørelse",
+        "ProcessID": "Prosess ID",
+        "Created": "Opprettet",
+        "HideColumns": "Skjul tilganger/eier kolonner",
+        "Folder is empty": "Mappen er tom",
+        "Check Latest Version": "Se etter oppdateringer",
+        "Generate new password hash": "Generer en ny passord hash",
+        "You are logged in": "Du er innlogget",
+        "Login failed. Invalid username or password": "Innlogging feilet. Feil brukernavn eller passord",
+        "password_hash not supported, Upgrade PHP version": "password_hash er ikke støttet, venligst oppdater PHP versjonen"
+      }
+    },
    {
      "name": "فارسی",
      "code": "Fa",
@@ -694,7 +774,7 @@
      "code": "id",
      "translation": {
        "AppName": "Tiny File Manager",
-        "AppTitle": "Pengelola File",
+        "AppTitle": "Pengelola Berkas",
        "Login": "Masuk",
        "Username": "Nama pengguna",
        "Password": "Kata sandi",
@@ -702,12 +782,12 @@
        "Move": "Pindah",
        "Copy": "Salin",
        "Save": "Simpan",
-        "SelectAll": "Pilih semua",
-        "UnSelectAll": "Batalkan pilihan semua",
-        "File": "File",
+        "SelectAll": "Tandai semua",
+        "UnSelectAll": "Urungkan tandai",
+        "File": "Berkas",
        "Back": "Kembali",
        "Size": "Ukuran",
-        "Perms": "Perizinan",
+        "Perms": "Hak akses",
        "Modified": "Terakhir diubah",
        "Owner": "Pemilik",
        "Search": "Cari",
@@ -716,18 +796,18 @@
        "Delete": "Hapus",
        "Rename": "Ganti nama",
        "CopyTo": "Salin ke",
-        "DirectLink": "Link langsung",
-        "UploadingFiles": "Mengupload file",
-        "ChangePermissions": "Ubah perizinan",
+        "DirectLink": "Tautan langsung",
+        "UploadingFiles": "Mengunggah berkas",
+        "ChangePermissions": "Ubah hak akses",
        "Copying": "Menyalin",
        "CreateNewItem": "Buat item baru",
        "Name": "Nama",
        "AdvancedEditor": "Editor tingkat lanjut",
        "RememberMe": "Ingat saya",
        "Actions": "Aksi",
-        "Upload": "Upload",
-        "Cancel": "Batal",
-        "InvertSelection": "Pilihan sebaliknya",
+        "Upload": "Unggah",
+        "Cancel": "Urungkan",
+        "InvertSelection": "Tandai sebaliknya",
        "DestinationFolder": "Folder tujuan",
        "ItemType": "Tipe item",
        "ItemName": "Nama item",
@@ -739,13 +819,34 @@
        "Edit": "Edit",
        "NormalEditor": "Editor normal",
        "BackUp": "Cadangkan",
-        "SourceFolder": "Folder sumber",
-        "Files": "File",
+        "SourceFolder": "Folder asal",
+        "Files": "Berkas-berkas",
        "Change": "Ubah",
-        "Settings": "Pengaturan",
+        "Settings": "Setelan",
        "Language": "Bahasa",
-        "MemoryUsed": "Memori terpakai",
-        "PartitionSize": "Ukuran partisi"
+        "MemoryUsed": "Memori digunakan",
+        "PartitionSize": "Ukuran partisi",
+        "ErrorReporting": "Pelaporan kesalahan",
+        "ShowHiddenFiles": "Tampilkan berkas tersembunyi",
+        "Full size": "Total ukuran",
+        "Help": "Bantuan",
+        "Free of": "dari",
+        "Preview": "Pratinjau",
+        "Help Documents": "Dokumen bantuan",
+        "Report Issue": "Laporkan masalah",
+        "Generate": "Hasilkan",
+        "FullSize": "Total ukuran",
+        "FreeOf": "dari",
+        "CalculateFolderSize": "Kalkulasi ukuran foler",
+        "ProcessID": "ID proses",
+        "Created": "Dibuat",
+        "HideColumns": "Sembunyikan kolom hak akses/pemilik",
+        "Folder is empty": "Folder kosong",
+        "Check Latest Version": "Periksa versi terbaru",
+        "Generate new password hash": "Buat hash kata sandi baru",
+        "You are logged in": "Anda sudah masuk",
+        "Login failed. Invalid username or password": "Gagal masuk. Nama pengguna atau kata sandi tidak valid",
+        "password_hash not supported, Upgrade PHP version": "Tidak mendukung password_hash, Perbarui versi PHP"
      }
    },
    {
@@ -1348,6 +1449,75 @@
        "FreeOf": "voľné z"
      }
    },
+    {
+      "name": "Suomi",
+      "code": "fi",
+      "translation": {
+        "AppName": "Tiny File Manager",
+        "AppTitle": "File Manager",
+        "Login": "Kirjautuminen",
+        "Username": "Käyttäjänimi",
+        "Password": "Salasana",
+        "Logout": "Kirjaudu ulos",
+        "Move": "Siirrä",
+        "Copy": "Kopioi",
+        "Save": "Tallenna",
+        "SelectAll": "Valitse kaikki",
+        "UnSelectAll": "Poista valinnat",
+        "File": "Tiedosto",
+        "Back": "Takaisin",
+        "Size": "Koko",
+        "Perms": "Oikeudet",
+        "Modified": "Muokattu",
+        "Owner": "Omistaja",
+        "Search": "Haku",
+        "NewItem": "Luo uusi...",
+        "Folder": "Kansio",
+        "Delete": "Poista",
+        "Rename": "Nimeä uudelleen",
+        "CopyTo": "Kopioi kohteeseen",
+        "DirectLink": "Suora linkki",
+        "UploadingFiles": "Siirrä tiedostoja",
+        "ChangePermissions": "Muuta oikeuksia",
+        "Copying": "Kopioidaan",
+        "CreateNewItem": "Luo uusi tiedosto tai kansio",
+        "Name": "Nimi",
+        "AdvancedEditor": "Edistynyt editori",
+        "RememberMe": "Muista minut",
+        "Actions": "Toiminnot",
+        "Upload": "Vie",
+        "Cancel": "Peruuta",
+        "InvertSelection": "Vaihda valinta",
+        "DestinationFolder": "Kohdekansio",
+        "ItemType": "Tiedoston tyyppi",
+        "ItemName": "Nimi",
+        "CreateNow": "Luo nyt",
+        "Download": "Lataa",
+        "Open": "Avaa",
+        "UnZip": "Pura",
+        "UnZipToFolder": "Pura kansioon",
+        "Edit": "Muokkaa",
+        "NormalEditor": "Editori",
+        "BackUp": "Varmuuskopioi",
+        "SourceFolder": "Kohdekansio",
+        "Files": "Tiedostot",
+        "Change": "Vaihda",
+        "Settings": "Asetukset",
+        "Language": "Kieli",
+        "MemoryUsed": "Muistia käytetty",
+        "PartitionSize": "Osion koko",
+        "ErrorReporting": "Virheraportit",
+        "ShowHiddenFiles": "Näytä piilotiedostot",
+        "Preview": "Esikatsele",
+        "Help": "Apua",
+        "FullSize": "Täysikokoinen",
+        "FreeOf": "Vapaana",
+        "CalculateFolderSize": "Laske kansion koko",
+        "CheckLatestVersion": "Tarkista päivitykset",
+        "Generate new password hash": "Luo uusi salasana-hash",
+        "HideColumns": "Piilota oikeudet-/omistaja-sarakkeet"
+      }
+    },
    {
      "name": "한국어",
      "code": "ko",
Author	SHA1	Message	Date
William Gilmour	c5d481c5cc	Fixed Rename with folder quotes (#534 ) Fixed the Rename functionality to work with folders that contain single quotes in them by calling `addslashes` on the path.	2021-04-30 05:57:10 +05:30
Prasath Mani	a04567d3ba	Fix security issues #525 and #526	2021-04-22 13:41:35 +05:30
huntr.dev \| the place to protect open source	03c3f6d7f9	Fixed 3 sinks which caused XSS in filename (#511 ) Co-authored-by: Vaibhav Shinde <vaibhavkshinde20@gmail.com>	2021-03-22 18:26:55 +05:30
Prasath Mani	95147f5828	remove decoded php codes and code cleanup	2021-02-24 13:33:57 +05:30
ccdd13	dd9d7c09a2	Feat/mixed changes (#502 ) * remove trailing whitespace Signed-off-by: ccdd13 <78702084+ccdd13@users.noreply.github.com> * safe include config.php with __DIR__ * replace doc url for $datetime_format from function.date.php to datetime.format.php Signed-off-by: ccdd13 <ccdd13@users.noreply.github.com> * put $auth_users & $readonly_users together Signed-off-by: ccdd13 <ccdd13@users.noreply.github.com> * update $datetime_format Signed-off-by: ccdd13 <ccdd13@users.noreply.github.com> Co-authored-by: ammm ccdd12 <mamok43076@dashseat.com> Co-authored-by: ccdd13 <ccdd13@users.noreply.github.com>	2021-02-24 12:37:38 +05:30
Prasath Mani	a19ff20768	Update vendor CDN versions	2021-02-23 11:47:57 +05:30
HOOP Mediaclinic	b03232775e	Added Finnish translation (#486 ) Co-authored-by: Jani Kiviranta <jani.kiviranta@hoop.fi>	2021-01-19 06:37:00 +05:30
Peter Frost	ef09231454	Fix file size display in file viewer (#475 )	2020-12-23 20:46:00 +05:30
Adrian B. Hoffsten	6b06fb2532	Norwegian translation[NO] (#474 )	2020-12-22 10:52:43 +05:30
Aditya Phra	2512330dee	Update Indonesia translation (#435 )	2020-12-06 10:11:21 +05:30