You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Unfortunately, in many cases it is necessary to adjust the variables $root_path and $root_url within the code. This is due to the use of subdirectories. Even calling the same file https://domain.tld/subdomain/tinyfilemanager.php or https://subdomain.domain.tld/tinymfilemanager.php leads to side effects and therefore to security problems under certain circumstances.
I would therefore like to suggest automatically extending the values of $root_path and $root_url via $_SERVER['REQUEST_URI'] in such a way that it works for directories and subdirectories as well as for rewrites from e.g. tinyfilemanager.php to /admin. I think than it works in the most cases without modifications in the code.
$base_path is the folder /path or /path1/path2 ... where the phpfilemanager.php is located. From the point of view of PHP File Manager it is /. If phpfilemanager.php is located in a subdirectory and you want to access directories above it, you would have to set $base_path once manually. $base_path='';
// Root path for file manager
// use absolute path of directory i.e: '/var/www/folder' or $_SERVER['DOCUMENT_ROOT'].'/folder'
//make sure update $root_url in next section
$root_path = $_SERVER['DOCUMENT_ROOT'] . $base_path;
// Root url for links in file manager.Relative to $http_host. Variants: '', 'path/to/subfolder'
// Will not working if $root_path will be outside of server document root
$root_url = $base_path;
You could also dispense with $base_path in the implementation and just use the variable $root_url.
The text was updated successfully, but these errors were encountered:
Tiny File Manager is very cool. Thanks.
Unfortunately, in many cases it is necessary to adjust the variables $root_path and $root_url within the code. This is due to the use of subdirectories. Even calling the same file
https://domain.tld/subdomain/tinyfilemanager.php
orhttps://subdomain.domain.tld/tinymfilemanager.php
leads to side effects and therefore to security problems under certain circumstances.I would therefore like to suggest automatically extending the values of $root_path and $root_url via
$_SERVER['REQUEST_URI']
in such a way that it works for directories and subdirectories as well as for rewrites from e.g.tinyfilemanager.php
to/admin
. I think than it works in the most cases without modifications in the code.$base_path is the folder
/path
or/path1/path2
... where thephpfilemanager.php
is located. From the point of view of PHP File Manager it is/
. If phpfilemanager.php is located in a subdirectory and you want to access directories above it, you would have to set $base_path once manually.$base_path='';
You could also dispense with $base_path in the implementation and just use the variable $root_url.
The text was updated successfully, but these errors were encountered: