Nemcio/simple-file-manager
1
0
Fork 0
mirror of https://github.com/jcampbell1/simple-file-manager.git synced 2025-02-20 22:00:04 +01:00
Code Issues Packages Projects Releases Activity

Adds option to prevent file deletion.

Browse Source 
Hides delete option from UI, and prevents delete via POST.
This commit is contained in:
mesler1
2016-06-22 10:37:55 -05:00
committed by GitHub
parent 82dd85779d
commit 02ab9bc9e0
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
index.php
View File

@@ -6,6 +6,9 @@ Copyright John Campbell (jcampbell1)
Liscense: MIT Liscense: MIT
********************************/ ********************************/
// Set to false to disable delete button and delete POST request.
$allow_delete = true;
/* Uncomment section below, if you want a trivial password protection */ /* Uncomment section below, if you want a trivial password protection */
/* /*
@@ -54,8 +57,11 @@ if($_GET['do'] == 'list') {
'name' => basename($i), 'name' => basename($i),
'path' => preg_replace('@^\./@', '', $i), 'path' => preg_replace('@^\./@', '', $i),
'is_dir' => is_dir($i), 'is_dir' => is_dir($i),
'is_deleteable' => (!is_dir($i) && is_writable($directory)) || 'is_deleteable' => $allow_delete && ((!is_dir($i) && is_writable($directory)) ||
(is_dir($i) && is_writable($directory) && is_recursively_deleteable($i)), (is_dir($i) && is_writable($directory) && is_recursively_deleteable($i))),
'is_readable' => is_readable($i), 'is_readable' => is_readable($i),
'is_writable' => is_writable($i), 'is_writable' => is_writable($i),
'is_executable' => is_executable($i), 'is_executable' => is_executable($i),
@@ -67,7 +73,9 @@ if($_GET['do'] == 'list') {
echo json_encode(array('success' => true, 'is_writable' => is_writable($file), 'results' =>$result)); echo json_encode(array('success' => true, 'is_writable' => is_writable($file), 'results' =>$result));
exit; exit;
} elseif ($_POST['do'] == 'delete') { } elseif ($_POST['do'] == 'delete') {
rmrf($file); if($allow_delete) {
rmrf($file);
}
exit; exit;
} elseif ($_POST['do'] == 'mkdir') { } elseif ($_POST['do'] == 'mkdir') {
// don't allow actions outside root. we also filter out slashes to catch args like './../outside' // don't allow actions outside root. we also filter out slashes to catch args like './../outside'