Comments on: PHP File Manager

By: danyl

danyl — Tue, 03 Aug 2004 01:17:29 +0000

Things to be aware of:
If you’re not using the $user and $pass settings, you’re basically providing webspace for anyone in the world to upload/download things.

If you don’t add “shtml” to the list of filename extensions to turn off, and people other than yourself can access this script, you’ve got a big security hole. (note, the demo at sourceforge doesn’t have that extension excluded… *wince*)

Finally, I’d suggest placing .htaccess level authetication on the directory where this thing resides.

Don’t get me wrong - its a great script - but it could bite you if you’re careless with it.

Thanks for the link!

Danyl

By: Andreas

Andreas — Tue, 30 Nov 1999 00:00:00 +0000

If you want something even simpler there is File Thingie ( http://www.solitude.dk/filethingie/ ). Yes, I made it. It’s one file, no fuss.

IMHO it’s easier to customize (pure CSS design), and it’s xhtml 1.1 compliant for those who like that kind of stuff.

By: Mariann

Mariann — Tue, 30 Nov 1999 00:00:00 +0000

Love this script as I’m cobbling together a mixture of different tools, content management systems, and scripts to offer a portfolio system for my students to use next semester. I’ll definitely be checking this out, especially if it allows for file size limits!