‘Password’, ‘Username2’ => ‘Password2’, …)
$auth_users = array(
‘jtatayb’ => ‘me5480’,
);
// Enable highlight.js (https://highlightjs.org/) on view’s page
$use_highlightjs = true;
// highlight.js style
$highlightjs_style = ‘vs’;
// Default timezone for date() and time() – http://php.net/manual/en/timezones.php
$default_timezone = ‘Europe/Minsk’; // UTC+3
// Root path for file manager
$root_path = $_SERVER[‘DOCUMENT_ROOT’];
// Root url for links in file manager.Relative to $http_host. Variants: », ‘path/to/subfolder’
// Will not working if $root_path will be outside of server document root
$root_url = »;
// Server hostname. Can set manually if wrong
$http_host = $_SERVER[‘HTTP_HOST’];
// input encoding for iconv
$iconv_input_encoding = ‘CP1251’;
// date() format for file modification date
$datetime_format = ‘d.m.y H:i’;
//— EDIT BELOW CAREFULLY OR DO NOT EDIT AT ALL
// if fm included
if (defined(‘FM_EMBED’)) {
$use_auth = false;
} else {
@set_time_limit(600);
date_default_timezone_set($default_timezone);
ini_set(‘default_charset’, ‘UTF-8’);
if (version_compare(PHP_VERSION, ‘5.6.0’, ‘<') && function_exists('mb_internal_encoding')) {
mb_internal_encoding('UTF-8');
}
if (function_exists('mb_regex_encoding')) {
mb_regex_encoding('UTF-8');
}
session_cache_limiter('');
session_name('filemanager');
session_start();
}
if (empty($auth_users)) {
$use_auth = false;
}
$is_https = isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on' || $_SERVER['HTTPS'] == 1)
|| isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https';
// clean and check $root_path
$root_path = rtrim($root_path, '\\/');
$root_path = str_replace('\\', '/', $root_path);
if (!@is_dir($root_path)) {
echo sprintf('
Root path «%s» not found!
‘, fm_enc($root_path));
exit;
}
// clean $root_url
$root_url = fm_clean_path($root_url);
// abs path for site
defined(‘FM_ROOT_PATH’) || define(‘FM_ROOT_PATH’, $root_path);
defined(‘FM_ROOT_URL’) || define(‘FM_ROOT_URL’, ($is_https ? ‘https’ : ‘http’) . ‘://’ . $http_host . (!empty($root_url) ? ‘/’ . $root_url : »));
defined(‘FM_SELF_URL’) || define(‘FM_SELF_URL’, ($is_https ? ‘https’ : ‘http’) . ‘://’ . $http_host . $_SERVER[‘PHP_SELF’]);
// logout
if (isset($_GET[‘logout’])) {
unset($_SESSION[‘logged’]);
fm_redirect(FM_SELF_URL);
}
// Show image here
if (isset($_GET[‘img’])) {
fm_show_image($_GET[‘img’]);
}
// Auth
if ($use_auth) {
if (isset($_SESSION[‘logged’], $auth_users[$_SESSION[‘logged’]])) {
// Logged
} elseif (isset($_POST[‘fm_usr’], $_POST[‘fm_pwd’])) {
// Logging In
sleep(1);
if (isset($auth_users[$_POST[‘fm_usr’]]) && $_POST[‘fm_pwd’] === $auth_users[$_POST[‘fm_usr’]]) {
$_SESSION[‘logged’] = $_POST[‘fm_usr’];
fm_set_msg(‘You are logged in’);
fm_redirect(FM_SELF_URL . ‘?p=’);
} else {
unset($_SESSION[‘logged’]);
fm_set_msg(‘Wrong password’, ‘error’);
fm_redirect(FM_SELF_URL);
}
} else {
// Form
unset($_SESSION[‘logged’]);
fm_show_header();
fm_show_message();
?>
%s deleted’ : ‘File %s deleted’;
fm_set_msg(sprintf($msg, fm_enc($del)));
} else {
$msg = $is_dir ? ‘Folder %s not deleted’ : ‘File %s not deleted’;
fm_set_msg(sprintf($msg, fm_enc($del)), ‘error’);
}
} else {
fm_set_msg(‘Wrong file or folder name’, ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Create folder
if (isset($_GET[‘new’])) {
$new = strip_tags($_GET[‘new’]); // remove unwanted characters from folder name
$new = fm_clean_path($new);
$new = str_replace(‘/’, », $new);
if ($new != » && $new != ‘..’ && $new != ‘.’) {
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
if (fm_mkdir($path . ‘/’ . $new, false) === true) {
fm_set_msg(sprintf(‘Folder %s created’, fm_enc($new)));
} elseif (fm_mkdir($path . ‘/’ . $new, false) === $path . ‘/’ . $new) {
fm_set_msg(sprintf(‘Folder %s already exists’, fm_enc($new)), ‘alert’);
} else {
fm_set_msg(sprintf(‘Folder %s not created’, fm_enc($new)), ‘error’);
}
} else {
fm_set_msg(‘Wrong folder name’, ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Copy folder / file
if (isset($_GET[‘copy’], $_GET[‘finish’])) {
// from
$copy = $_GET[‘copy’];
$copy = fm_clean_path($copy);
// empty path
if ($copy == ») {
fm_set_msg(‘Source path not defined’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// abs path from
$from = FM_ROOT_PATH . ‘/’ . $copy;
// abs path to
$dest = FM_ROOT_PATH;
if (FM_PATH != ») {
$dest .= ‘/’ . FM_PATH;
}
$dest .= ‘/’ . basename($from);
// move?
$move = isset($_GET[‘move’]);
// copy/move
if ($from != $dest) {
$msg_from = trim(FM_PATH . ‘/’ . basename($from), ‘/’);
if ($move) {
$rename = fm_rename($from, $dest);
if ($rename) {
fm_set_msg(sprintf(‘Moved from %s to %s‘, fm_enc($copy), fm_enc($msg_from)));
} elseif ($rename === null) {
fm_set_msg(‘File or folder with this path already exists’, ‘alert’);
} else {
fm_set_msg(sprintf(‘Error while moving from %s to %s‘, fm_enc($copy), fm_enc($msg_from)), ‘error’);
}
} else {
if (fm_rcopy($from, $dest)) {
fm_set_msg(sprintf(‘Copyied from %s to %s‘, fm_enc($copy), fm_enc($msg_from)));
} else {
fm_set_msg(sprintf(‘Error while copying from %s to %s‘, fm_enc($copy), fm_enc($msg_from)), ‘error’);
}
}
} else {
fm_set_msg(‘Paths must be not equal’, ‘alert’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Mass copy files/ folders
if (isset($_POST[‘file’], $_POST[‘copy_to’], $_POST[‘finish’])) {
// from
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
// to
$copy_to_path = FM_ROOT_PATH;
$copy_to = fm_clean_path($_POST[‘copy_to’]);
if ($copy_to != ») {
$copy_to_path .= ‘/’ . $copy_to;
}
if ($path == $copy_to_path) {
fm_set_msg(‘Paths must be not equal’, ‘alert’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
if (!is_dir($copy_to_path)) {
if (!fm_mkdir($copy_to_path, true)) {
fm_set_msg(‘Unable to create destination folder’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
}
// move?
$move = isset($_POST[‘move’]);
// copy/move
$errors = 0;
$files = $_POST[‘file’];
if (is_array($files) && count($files)) {
foreach ($files as $f) {
if ($f != ») {
// abs path from
$from = $path . ‘/’ . $f;
// abs path to
$dest = $copy_to_path . ‘/’ . $f;
// do
if ($move) {
$rename = fm_rename($from, $dest);
if ($rename === false) {
$errors++;
}
} else {
if (!fm_rcopy($from, $dest)) {
$errors++;
}
}
}
}
if ($errors == 0) {
$msg = $move ? ‘Selected files and folders moved’ : ‘Selected files and folders copied’;
fm_set_msg($msg);
} else {
$msg = $move ? ‘Error while moving items’ : ‘Error while copying items’;
fm_set_msg($msg, ‘error’);
}
} else {
fm_set_msg(‘Nothing selected’, ‘alert’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Rename
if (isset($_GET[‘ren’], $_GET[‘to’])) {
// old name
$old = $_GET[‘ren’];
$old = fm_clean_path($old);
$old = str_replace(‘/’, », $old);
// new name
$new = $_GET[‘to’];
$new = fm_clean_path($new);
$new = str_replace(‘/’, », $new);
// path
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
// rename
if ($old != » && $new != ») {
if (fm_rename($path . ‘/’ . $old, $path . ‘/’ . $new)) {
fm_set_msg(sprintf(‘Renamed from %s to %s‘, fm_enc($old), fm_enc($new)));
} else {
fm_set_msg(sprintf(‘Error while renaming from %s to %s‘, fm_enc($old), fm_enc($new)), ‘error’);
}
} else {
fm_set_msg(‘Names not set’, ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Download
if (isset($_GET[‘dl’])) {
$dl = $_GET[‘dl’];
$dl = fm_clean_path($dl);
$dl = str_replace(‘/’, », $dl);
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
if ($dl != » && is_file($path . ‘/’ . $dl)) {
header(‘Content-Description: File Transfer’);
header(‘Content-Type: application/octet-stream’);
header(‘Content-Disposition: attachment; filename=»‘ . basename($path . ‘/’ . $dl) . ‘»‘);
header(‘Content-Transfer-Encoding: binary’);
header(‘Connection: Keep-Alive’);
header(‘Expires: 0’);
header(‘Cache-Control: must-revalidate, post-check=0, pre-check=0’);
header(‘Pragma: public’);
header(‘Content-Length: ‘ . filesize($path . ‘/’ . $dl));
readfile($path . ‘/’ . $dl);
exit;
} else {
fm_set_msg(‘File not found’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
}
// Upload
if (isset($_POST[‘upl’])) {
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
$errors = 0;
$uploads = 0;
$total = count($_FILES[‘upload’][‘name’]);
for ($i = 0; $i < $total; $i++) {
$tmp_name = $_FILES['upload']['tmp_name'][$i];
if (empty($_FILES['upload']['error'][$i]) && !empty($tmp_name) && $tmp_name != 'none') {
if (move_uploaded_file($tmp_name, $path . '/' . $_FILES['upload']['name'][$i])) {
$uploads++;
} else {
$errors++;
}
}
}
if ($errors == 0 && $uploads > 0) {
fm_set_msg(sprintf(‘All files uploaded to %s‘, fm_enc($path)));
} elseif ($errors == 0 && $uploads == 0) {
fm_set_msg(‘Nothing uploaded’, ‘alert’);
} else {
fm_set_msg(sprintf(‘Error while uploading files. Uploaded files: %s’, $uploads), ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Mass deleting
if (isset($_POST[‘group’], $_POST[‘delete’])) {
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
$errors = 0;
$files = $_POST[‘file’];
if (is_array($files) && count($files)) {
foreach ($files as $f) {
if ($f != ») {
$new_path = $path . ‘/’ . $f;
if (!fm_rdelete($new_path)) {
$errors++;
}
}
}
if ($errors == 0) {
fm_set_msg(‘Selected files and folder deleted’);
} else {
fm_set_msg(‘Error while deleting items’, ‘error’);
}
} else {
fm_set_msg(‘Nothing selected’, ‘alert’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Pack files
if (isset($_POST[‘group’], $_POST[‘zip’])) {
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
if (!class_exists(‘ZipArchive’)) {
fm_set_msg(‘Operations with archives are not available’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
$files = $_POST[‘file’];
if (!empty($files)) {
chdir($path);
if (count($files) == 1) {
$one_file = reset($files);
$one_file = basename($one_file);
$zipname = $one_file . ‘_’ . date(‘ymd_His’) . ‘.zip’;
} else {
$zipname = ‘archive_’ . date(‘ymd_His’) . ‘.zip’;
}
$zipper = new FM_Zipper();
$res = $zipper->create($zipname, $files);
if ($res) {
fm_set_msg(sprintf(‘Archive %s created’, fm_enc($zipname)));
} else {
fm_set_msg(‘Archive not created’, ‘error’);
}
} else {
fm_set_msg(‘Nothing selected’, ‘alert’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Unpack
if (isset($_GET[‘unzip’])) {
$unzip = $_GET[‘unzip’];
$unzip = fm_clean_path($unzip);
$unzip = str_replace(‘/’, », $unzip);
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
if (!class_exists(‘ZipArchive’)) {
fm_set_msg(‘Operations with archives are not available’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
if ($unzip != » && is_file($path . ‘/’ . $unzip)) {
$zip_path = $path . ‘/’ . $unzip;
//to folder
$tofolder = »;
if (isset($_GET[‘tofolder’])) {
$tofolder = pathinfo($zip_path, PATHINFO_FILENAME);
if (fm_mkdir($path . ‘/’ . $tofolder, true)) {
$path .= ‘/’ . $tofolder;
}
}
$zipper = new FM_Zipper();
$res = $zipper->unzip($zip_path, $path);
if ($res) {
fm_set_msg(‘Archive unpacked’);
} else {
fm_set_msg(‘Archive not unpacked’, ‘error’);
}
} else {
fm_set_msg(‘File not found’, ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
// Change Perms (not for Windows)
if (isset($_POST[‘chmod’]) && !FM_IS_WIN) {
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
$file = $_POST[‘chmod’];
$file = fm_clean_path($file);
$file = str_replace(‘/’, », $file);
if ($file == » || (!is_file($path . ‘/’ . $file) && !is_dir($path . ‘/’ . $file))) {
fm_set_msg(‘File not found’, ‘error’);
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
$mode = 0;
if (!empty($_POST[‘ur’])) {
$mode |= 0400;
}
if (!empty($_POST[‘uw’])) {
$mode |= 0200;
}
if (!empty($_POST[‘ux’])) {
$mode |= 0100;
}
if (!empty($_POST[‘gr’])) {
$mode |= 0040;
}
if (!empty($_POST[‘gw’])) {
$mode |= 0020;
}
if (!empty($_POST[‘gx’])) {
$mode |= 0010;
}
if (!empty($_POST[‘or’])) {
$mode |= 0004;
}
if (!empty($_POST[‘ow’])) {
$mode |= 0002;
}
if (!empty($_POST[‘ox’])) {
$mode |= 0001;
}
if (@chmod($path . ‘/’ . $file, $mode)) {
fm_set_msg(‘Permissions changed’);
} else {
fm_set_msg(‘Permissions not changed’, ‘error’);
}
fm_redirect(FM_SELF_URL . ‘?p=’ . urlencode(FM_PATH));
}
/*************************** /ACTIONS ***************************/
// get current path
$path = FM_ROOT_PATH;
if (FM_PATH != ») {
$path .= ‘/’ . FM_PATH;
}
// check path
if (!is_dir($path)) {
fm_redirect(FM_SELF_URL . ‘?p=’);
}
// get parent folder
$parent = fm_get_parent_path(FM_PATH);
$objects = is_readable($path) ? scandir($path) : array();
$folders = array();
$files = array();
if (is_array($objects)) {
foreach ($objects as $file) {
if ($file == ‘.’ || $file == ‘..’) {
continue;
}
$new_path = $path . ‘/’ . $file;
if (is_file($new_path)) {
$files[] = $file;
} elseif (is_dir($new_path) && $file != ‘.’ && $file != ‘..’) {
$folders[] = $file;
}
}
}
if (!empty($files)) {
natcasesort($files);
}
if (!empty($folders)) {
natcasesort($folders);
}
// upload form
if (isset($_GET[‘upload’])) {
fm_show_header(); // HEADER
fm_show_nav_path(FM_PATH); // current path
?>
Uploading files
Destination folder:
Copying
««
Full path:
File size: = 1000): ?> ()
MIME-type:
Files in archive:
Total size:
Size in archive:
Compression: %
‘;
}
// Text info
if ($is_text) {
$is_utf8 = fm_is_utf8($content);
if (function_exists(‘iconv’)) {
if (!$is_utf8) {
$content = iconv(FM_ICONV_INPUT_ENC, ‘UTF-8//IGNORE’, $content);
}
}
echo ‘Charset: ‘ . ($is_utf8 ? ‘utf-8’ : ‘8 bit’) . ‘
‘;
}
?>
Download
Open
Unpack
Unpack to folder
Back
‘;
foreach ($filenames as $fn) {
if ($fn[‘folder’]) {
echo ‘‘ . fm_enc($fn[‘name’]) . ‘
‘;
} else {
echo $fn[‘name’] . ‘ (‘ . fm_get_filesize($fn[‘filesize’]) . ‘)
‘;
}
}
echo ‘‘;
} else {
echo ‘
Error while fetching archive info
‘;
}
} elseif ($is_image) {
// Image content
if (in_array($ext, array(‘gif’, ‘jpg’, ‘jpeg’, ‘png’, ‘bmp’, ‘ico’))) {
echo ‘
‘;
}
} elseif ($is_audio) {
// Audio content
echo ‘
‘;
} elseif ($is_video) {
// Video content
echo ‘
‘;
} elseif ($is_text) {
if (FM_USE_HIGHLIGHTJS) {
// highlight
$hljs_classes = array(
‘shtml’ => ‘xml’,
‘htaccess’ => ‘apache’,
‘phtml’ => ‘php’,
‘lock’ => ‘json’,
‘svg’ => ‘xml’,
);
$hljs_class = isset($hljs_classes[$ext]) ? ‘lang-‘ . $hljs_classes[$ext] : ‘lang-‘ . $ext;
if (empty($ext) || in_array(strtolower($file), fm_get_text_names()) || preg_match(‘#\.min\.(css|js)$#i’, $file)) {
$hljs_class = ‘nohighlight’;
}
$content = ‘
' . fm_enc($content) . '
‘;
} elseif (in_array($ext, array(‘php’, ‘php4’, ‘php5’, ‘phtml’, ‘phps’))) {
// php highlight
$content = highlight_string($content, true);
} else {
$content = ‘
' . fm_enc($content) . '
‘;
}
echo $content;
}
?>
Change Permissions
Full path: