[PR #812] Upload only users #1064

New issue

Open

opened 2026-03-02 16:03:01 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 16:03:01 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/prasathmani/tinyfilemanager/pull/812
Author: @mythsmith
Created: 7/6/2022
Status: 🔄 Open

Base: master ← Head: uploadOnly

📝 Commits (5)

d4abd0a enabled chuncked upload
185bf1d Definition of upload-only users
28938dd Merge remote-tracking branch 'upstream/master'
0759f0b Merge branch 'master' into uploadOnly
066ab3a minor

📊 Changes

1 file changed (+70 additions, -48 deletions)

View changed files

📝 tinyfilemanager.php (+70 -48)

📄 Description

Introduces users which can only access the upload form. They cannot perform any other operation except upload a file.

This feature differs from $directories_users because the user cannot browse its own files. This allows to share the same credentials to multiple actors, without the risk of one actor seeing reserved files uploaded by other actors.

Each uploaded file is placed in a subdirectory structure like /incoming/<USERNAME>/<TIMESTAMP>/<FILENAME>.

Raw access to uploaded files through direct links can be protected with .htaccess, for example to avoid that links to malicious uploads could be guessed and then distributed.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/prasathmani/tinyfilemanager/pull/812 **Author:** [@mythsmith](https://github.com/mythsmith) **Created:** 7/6/2022 **Status:** 🔄 Open **Base:** `master` ← **Head:** `uploadOnly` --- ### 📝 Commits (5) - [`d4abd0a`](https://github.com/prasathmani/tinyfilemanager/commit/d4abd0a67f0c79cc648defd528f60e076617abed) enabled chuncked upload - [`185bf1d`](https://github.com/prasathmani/tinyfilemanager/commit/185bf1d7614ecd0fb237437cfe7348febc05a9a9) Definition of upload-only users - [`28938dd`](https://github.com/prasathmani/tinyfilemanager/commit/28938ddd53dffda84c723117351c5768d1c6cd29) Merge remote-tracking branch 'upstream/master' - [`0759f0b`](https://github.com/prasathmani/tinyfilemanager/commit/0759f0bd10fff72184a865f779f220e4bf6924ad) Merge branch 'master' into uploadOnly - [`066ab3a`](https://github.com/prasathmani/tinyfilemanager/commit/066ab3a033c3ea007d089d4951dcca8b011d5f06) minor ### 📊 Changes **1 file changed** (+70 additions, -48 deletions) <details> <summary>View changed files</summary> 📝 `tinyfilemanager.php` (+70 -48) </details> ### 📄 Description Introduces users which can only access the upload form. They cannot perform any other operation except upload a file. This feature differs from $directories_users because the user cannot browse its own files. This allows to share the same credentials to multiple actors, without the risk of one actor seeing reserved files uploaded by other actors. Each uploaded file is placed in a subdirectory structure like `/incoming/<USERNAME>/<TIMESTAMP>/<FILENAME>`. Raw access to uploaded files through direct links can be protected with .htaccess, for example to avoid that links to malicious uploads could be guessed and then distributed. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>