[GH-ISSUE #1147] disallow to change directory - possible ? #738

Open
opened 2026-03-02 16:01:08 +03:00 by kerem · 2 comments
Owner

Originally created by @n00bsi on GitHub (Feb 20, 2024).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1147

Hello,
is it possible to jail a user in a directory ?

https://server.domain.tld/upload/tinyfilemanager.php?p=uploader%2Ftest

for example directories: test, test2, test3

Because at the moment the User click to the URL above
login and an move around, go diretory up to test2, test3 etc.
But should only have access to diretory: test

How to disable / block this.
So that the URL show only the diretory and no others ?

Originally created by @n00bsi on GitHub (Feb 20, 2024). Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/1147 Hello, is it possible to jail a user in a directory ? https://server.domain.tld/upload/tinyfilemanager.php?p=uploader%2Ftest for example directories: test, test2, test3 Because at the moment the User click to the URL above login and an move around, go diretory up to test2, test3 etc. But should only have access to diretory: test How to disable / block this. So that the URL show only the diretory and no others ?
Author
Owner

@iinfotecnica commented on GitHub (Feb 28, 2024):

You must change the $root_path and specify the directory.
Example

$root_path = $_SERVER['DOCUMENT_ROOT'].'/teste';

Any function from what I understand only works if the folder has chmod 0777 permission
Functions such as compressing, editing, etc...

<!-- gh-comment-id:1967955682 --> @iinfotecnica commented on GitHub (Feb 28, 2024): You must change the $root_path and specify the directory. Example $root_path = $_SERVER['DOCUMENT_ROOT'].'/teste'; Any function from what I understand only works if the folder has chmod 0777 permission Functions such as compressing, editing, etc...
Author
Owner

@hestiacn commented on GitHub (May 3, 2024):

image
Refer to the above settings

<!-- gh-comment-id:2093769955 --> @hestiacn commented on GitHub (May 3, 2024): ![image](https://github.com/prasathmani/tinyfilemanager/assets/138613406/bf71c04c-1486-48ef-a32a-834461177347) Refer to the above settings
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tinyfilemanager#738
No description provided.