[GH-ISSUE #987] Cannot upload files with certain file extensions #636

New issue

Closed

opened 2026-03-02 16:00:26 +03:00 by kerem · 2 comments

kerem commented

2026-03-02 16:00:26 +03:00

Owner

Originally created by @ungive on GitHub (Mar 7, 2023).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/987

I have tested this with the docker image in the master branch with HEAD commit d705da6, logged in as default admin user. (Command: sudo docker build -t tiny1 .; sudo docker run -d -p 8000:80 -v $(pwd)/data:/var/www/html/data --name tiny tiny1:latest). I also tested this on another instance, running on an external server, with the same issue.

I dropped a bunch of files into the "Upload Files" window (both drag and drop and ~~selecting with the file manager~~) that all had the file extension ".mcfunction" and none of them were uploaded, even after having waited for several minutes. At some point some showed a successful indication of an upload, but upon checking the folder it was still empty. I renamed the files to *.cpp and then it worked like a charm.

Container logs (of opening the upload panel and dropping files):

[Tue Mar  7 11:57:44 2023] 172.17.0.1:34616 Accepted
[Tue Mar  7 11:57:44 2023] 172.17.0.1:34616 [200]: GET /index.php?p=data%2Ffunctions2
[Tue Mar  7 11:57:44 2023] 172.17.0.1:34616 Closing
[Tue Mar  7 11:57:45 2023] 172.17.0.1:34618 Accepted
[Tue Mar  7 11:57:45 2023] 172.17.0.1:34618 [200]: GET /index.php?p=data%2Ffunctions2&upload
[Tue Mar  7 11:57:45 2023] 172.17.0.1:34618 Closing
[Tue Mar  7 11:57:47 2023] 172.17.0.1:34628 Accepted

The browser console was empty.

Uploading using "Upload from URL" worked fine, by specifying a .mcfunction from GitHub (https://raw.githubusercontent.com/vonas/connectfour-datapack/master/data/connectfour/functions/_copy_gamestate_to_cache.mcfunction), so this might be an issue with the frontend and not the backend.

Originally created by @ungive on GitHub (Mar 7, 2023). Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/987 I have tested this with the docker image in the master branch with HEAD commit `d705da6`, logged in as default admin user. (Command: `sudo docker build -t tiny1 .; sudo docker run -d -p 8000:80 -v $(pwd)/data:/var/www/html/data --name tiny tiny1:latest`). I also tested this on another instance, running on an external server, with the same issue. I dropped a bunch of files into the "Upload Files" window (both drag and drop and <strike>selecting with the file manager</strike>) that all had the file extension ".mcfunction" and none of them were uploaded, even after having waited for several minutes. At some point *some* showed a successful indication of an upload, but upon checking the folder it was still empty. I renamed the files to `*.cpp` and then it worked like a charm. Container logs (of opening the upload panel and dropping files): ``` [Tue Mar 7 11:57:44 2023] 172.17.0.1:34616 Accepted [Tue Mar 7 11:57:44 2023] 172.17.0.1:34616 [200]: GET /index.php?p=data%2Ffunctions2 [Tue Mar 7 11:57:44 2023] 172.17.0.1:34616 Closing [Tue Mar 7 11:57:45 2023] 172.17.0.1:34618 Accepted [Tue Mar 7 11:57:45 2023] 172.17.0.1:34618 [200]: GET /index.php?p=data%2Ffunctions2&upload [Tue Mar 7 11:57:45 2023] 172.17.0.1:34618 Closing [Tue Mar 7 11:57:47 2023] 172.17.0.1:34628 Accepted ``` The browser console was empty. Uploading using "Upload from URL" worked fine, by specifying a `.mcfunction` from GitHub (https://raw.githubusercontent.com/vonas/connectfour-datapack/master/data/connectfour/functions/_copy_gamestate_to_cache.mcfunction), so this might be an issue with the frontend and not the backend.

kerem closed this issue

2026-03-02 16:00:26 +03:00

kerem commented

2026-03-02 16:00:27 +03:00

Author

Owner

@ungive commented on GitHub (Mar 7, 2023):

Edit: Seems to only be an issue on my Linux machine, drag and drop works on Windows. Probably an issue with dropzone.js

@ungive commented on GitHub (Mar 7, 2023): Edit: Seems to only be an issue on my Linux machine, drag and drop works on Windows. Probably an issue with dropzone.js

kerem commented

2026-03-02 16:00:27 +03:00

Author

Owner

@ungive commented on GitHub (Mar 7, 2023):

I uploaded from a directory in /home/user/.local/share/... by dragging files from there into the upload box and it didn't work. Moving those files to my Downloads directory and then trying again worked. Probably some permission issue in Linux with my browser and the file manager.

Closing.

@ungive commented on GitHub (Mar 7, 2023): I uploaded from a directory in `/home/user/.local/share/...` by dragging files from there into the upload box and it didn't work. Moving those files to my Downloads directory and then trying again worked. Probably some permission issue in Linux with my browser and the file manager. Closing.

kerem referenced this issue

2026-03-02 16:02:47 +03:00

[PR #636] [MERGED] Patched the RCE bug. #1020