Skip to content

Releases: LifeIsHex/php-file-manager

v1.1.0

05 Mar 22:39

Choose a tag to compare

Implement trash functionality for file deletion with AJAX support.

Full Changelog: 1.0.9...1.1.0

v1.0.9

05 Mar 16:14

Choose a tag to compare

  • Enhance the file extraction process with CSRF protection and AJAX response handling.
  • CSRF protection was missed with the Dropzone upload, causing the upload to silently fail and redirect.

Full Changelog: 1.0.8...1.0.9

v1.0.8

02 Mar 16:15

Choose a tag to compare

Add a Version class to manage application versioning and update the layout to display the current version.

Full Changelog: 1.0.7...1.0.8

v1.0.7

01 Mar 00:28

Choose a tag to compare

  • Added package.json to manage frontend libraries via npm
  • Added scripts/build-assets.js — run npm run build to update assets
  • Cleaned up versioned folder names (no more 5.9.3/, 6.5.1/ etc. in paths)

Full Changelog: 1.0.6...1.0.7

v1.0.6

28 Feb 22:11

Choose a tag to compare

  • CSRF protection enforced on all state-changing actions — delete, rename, new folder, copy, move, extract, compress now require POST + CSRF token
  • CSRF validation added to all AJAX endpoints — paste, delete-multiple, download-multiple, chmod now validate X-CSRF-Token header
  • XSS fix — escaped icon and permissions output in file listing template
  • XSS fix — escaped $assetsPath in all and <script> tag attributes
  • XSS fix — escaped $msg['type'] in CSS class output in layout and login templates
  • Open redirect fix — Response::redirect() now blocks absolute URLs and strips header injection characters
  • Header injection fix — PDF filename sanitized in Content-Disposition header
  • Action whitelist — unknown URL actions are now silently ignored instead of processed
  • Content-Security-Policy header added
  • Removed default credentials hint from login page
  • Disabled display_errors in entry point

Full Changelog: 1.0.5...1.0.6

v1.0.5

27 Feb 04:29

Choose a tag to compare

Add column visibility configuration and footer display options in the file manager.
Update documents.

Full Changelog: 1.0.4...1.0.5

v1.0.4

27 Feb 03:39

Choose a tag to compare

Enhance ImageMagick fallback logic and update README for HEIC support.

Full Changelog: 1.0.3...1.0.4

v1.0.3

27 Feb 03:22

Choose a tag to compare

bug fix: prevent copying or moving a directory into itself or its own subdirectory.

Full Changelog: 1.0.2...1.0.3

v1.0.2

24 Feb 18:13

Choose a tag to compare

Implement column visibility configuration for the file manager.

Full Changelog: v1.0.1...1.0.2