Releases: LifeIsHex/php-file-manager
Releases · LifeIsHex/php-file-manager
v1.1.0
v1.0.9
- Enhance the file extraction process with CSRF protection and AJAX response handling.
- CSRF protection was missed with the Dropzone upload, causing the upload to silently fail and redirect.
Full Changelog: 1.0.8...1.0.9
v1.0.8
Add a Version class to manage application versioning and update the layout to display the current version.
Full Changelog: 1.0.7...1.0.8
v1.0.7
- Added package.json to manage frontend libraries via npm
- Added scripts/build-assets.js — run npm run build to update assets
- Cleaned up versioned folder names (no more 5.9.3/, 6.5.1/ etc. in paths)
Full Changelog: 1.0.6...1.0.7
v1.0.6
- CSRF protection enforced on all state-changing actions — delete, rename, new folder, copy, move, extract, compress now require POST + CSRF token
- CSRF validation added to all AJAX endpoints — paste, delete-multiple, download-multiple, chmod now validate X-CSRF-Token header
- XSS fix — escaped icon and permissions output in file listing template
- XSS fix — escaped $assetsPath in all and <script> tag attributes
- XSS fix — escaped $msg['type'] in CSS class output in layout and login templates
- Open redirect fix — Response::redirect() now blocks absolute URLs and strips header injection characters
- Header injection fix — PDF filename sanitized in Content-Disposition header
- Action whitelist — unknown URL actions are now silently ignored instead of processed
- Content-Security-Policy header added
- Removed default credentials hint from login page
- Disabled display_errors in entry point
Full Changelog: 1.0.5...1.0.6
v1.0.5
Add column visibility configuration and footer display options in the file manager.
Update documents.
Full Changelog: 1.0.4...1.0.5
v1.0.4
Enhance ImageMagick fallback logic and update README for HEIC support.
Full Changelog: 1.0.3...1.0.4
v1.0.3
bug fix: prevent copying or moving a directory into itself or its own subdirectory.
Full Changelog: 1.0.2...1.0.3
v1.0.2
Implement column visibility configuration for the file manager.
Full Changelog: v1.0.1...1.0.2