mirror of
https://github.com/prasathmani/tinyfilemanager.git
synced 2026-04-26 10:55:56 +03:00
[GH-ISSUE #753] $global_readonly not working #514
Labels
No labels
Feature
Feature
Is It Really an Issue?
Need More Info
Request
Security
bug
duplicate
enhancement
enhancement
help wanted
invalid
pull-request
question
suggestion
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tinyfilemanager#514
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @kc9ryt on GitHub (Mar 19, 2022).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/753
Hello,
I am running v. 2.4.7 and $global_readonly = true does not seem to be working with auth turned off.
@prasathmani commented on GitHub (Mar 20, 2022):
@kc9ryt , check this #583
@shadowvfx commented on GitHub (Mar 22, 2022):
Full disclosure, I'm an idiot. I followed the link to issue 583 and I don't understand what it's getting at. Why doesn't setting global_readonly to true make it....read only? I am not a PHP expert, but I want to share a collection of files with a local club and I want them to be able to access the file directories, but NOT have any kind of editing privileges. I would prefer not needing a guest login or any login screen. Simply go to the directory and it will show a list of all files for browsing. I just want them to view the documents and download. All the file management stuff I can handle via FTP.
@alex-reach commented on GitHub (Jun 24, 2022):
This in not working for me either @prasathmani . Or are we doing something wrong?
@mrlawrencelam commented on GitHub (Jul 20, 2022):
Yes, this feature is seriously missing.
I want only the Administrator to be able to manage files (requires login).
But for public users, don't need to log in. They can go directly to the file list but can't edit/delete/upload files.
I tried pointing to the link tinymanager.php?fm_usr=user&fm_pwd=user123 but this doesn't work.
How can public users bypass the login form?
@andymcca commented on GitHub (Sep 29, 2022):
$global_readonly isn't currently referenced anywhere in the PHP file apart from the initial definition.
To get this to work I think you just need to change the definition of FM_READONLY in line 396 to the following -
define('FM_READONLY', ($use_auth && !empty($readonly_users) && isset($_SESSION[FM_SESSION_ID]['logged']) && in_array($_SESSION[FM_SESSION_ID]['logged'], $readonly_users)) || $global_readonly);
@prasathmani commented on GitHub (Nov 19, 2022):
This issue is addressed in the new release.