mask PHP File Manager

File Release Notes and Changelog

Release Name: mpfm_v2.3

Notes:
***********************************************************************************

Copyright (C) 2008 - Dinita Razvan Ioan - maskaro@users.sourceforge.net

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
    
    Please e-mail me with bugs and suggestions. :)

***********************************************************************************

***********************************************************************************
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
***********************************************************************************

***********************************************************************************
mask PHP File Manager
***********************************************************************************

mPFM is basically a PHP driven File Manager released under the GPL and designed with
security and functionality in mind and is intended primarly for Advanced Linux System
Users who need a remote way to manage a System Partition's files. It also works on
Windows machines, but the Owner/Group/Chmod functions might fail to work - use at
your own risk.

It's a cross-browser web application which validates against W3.org's XHTML 1.0 and
CSS2 Validators. It was tested in FF 2.0+ and IE 7.0 (might display correctly in IE
6.0 also, but i did not have the means to test it so far).

To run it correctly you just need a properly configured LAP (Linux Apache PHP). Try
and use only the latest PHP4 or PHP5 versions.

To make it work you just need to input the desired settings the first time you use
mPFM and you're good to go! (The first time it runs it will automatically prompt you
to create a configuration file.)

Once all configuration variables were correctly set, it creates 3 areas within the
browser window: one with the folder tree containing the folders found through recursive
scanning, one containing the actions and folders and files found in the selected
directory and one containing my name, my e-mail and W3.org XHTML and CSS validation
logos.

Currently, mPFM can (if given proper permissions):
1. edit/view/rename/create/delete/copy/move/chmod files and folders (creates needed
   directories).
   (For copy/move/delete actions, if errors are encountered, the files'/folders' paths
   which gave the error will be displayed.)
2. create RAR and ZIP archives of either one or more files or whole directories
   (recursively).
Note: you must edit RAR's path in the `rar` class (include/classes.php).
3. manage uploads of one or more files simultaneously.
4. search for files and folders in current folder.
5. display file's/folder's owner and group names.
6. sort files and folders by Name/Type/Size/Owner/Group/Last Accessed and Last
   Modified dates.
7. execute shell commands and display result.
8. display PHP code using pretty colours.
9. please your eyes using eye-candy filetype, folder and action icons.
10. restrict access based on users/groups, each group with its own set of allowed
	actions.
11. show some useful Partition statistics.
12. provide some useful controls when editing HTML/XHTML source files using TinyMCE
	Controls.
13. change file/folder ACLs (Access Control Lists).
	(if given proper permissions).

***********************************************************************************
Note 1 *!! MIGHT BE A SECURITY HOLE !!*
***********************************************************************************

How to be able to change File/Folder ACLs from within the File Manager:

Apache or Lighttpd web server drops root privileges as soon as they go into background. This makes executing root commands difficult.

Typically, Apache2 uses www-data username and Lighttpd uses lighttppd username to drop privileges. 

First, type this command to find out where the `setfacl` command resides within the System's folders.

# which setfacl (should output something like: /usr/bin/setfacl)

Then login as root user and type the following command:

# visudo

Now allow your web server to execute a script (setfacl) w/o password. If you are using Apache web server, type the following command:
www-data ALL=NOPASSWD: /usr/bin/setfacl

ALTERNATIVELY, if you are using Ligtttpd web server, type the following command:
lighttpd ALL=NOPASSWD: /usr/bin/setfacl

OR, if none of the above work for you, check your `httpd.conf` (or whatever name your WebServer configuration file has) and check what username the WebServer uses to run under and use that value.
<webserver_rununder_name> ALL=NOPASSWD: /usr/bin/setfacl (w/o `<>`)

Save and close the file.

Reboot the System.

***********************************************************************************
Note 2
***********************************************************************************

You may use any part of mPFM's source code only if you mention my name, this 
application's name and where you got it from within your source code (e.g.: as a 
comment somewhere). I also used a few bits of code released under the LGPL and some
other few under a special Distributor's License. If you want to use their bits of
code, do as I did and include their names in your source code and keep the necessary
license's close to where your files reside.


Changes:
***********************************************************************************
Changelog
***********************************************************************************

v2.3 - 23/06/2008

	* Added AutoLock of user accounts if wrong password is used for 3 times when logging in.
	* Added option to edit Locked Accounts using the Visual Configuration Panel.
	* Added option to Protect Groups from being locked using the Visual Configuration Panel.
	* Added User Access/Action Log and an option to view and empty it.
	* Greatly Improved security by preventing account hacking through manipulation of cookies.
	* Added AutoLogout after the number of seconds set in the Visual Control Panel.
	* Improved checking for permissions when clicking on an action link.
	* Added the possibility to change ACLs (Access Control Lists). (Note: Proper permissions needed. CHECK README.)

v2.2d - 06/06/2008

	* Fixed main view color change on hover over file/folder names. Would not change color after deselecting a file/folder.

v2.2c - 06/06/2008

	* Fixed main folder display - it did not show at all.

v2.2b - 06/06/2008

	* Fixed minor display bug when setting Show Extensions to False.
	* Minor Configuration Pannel fixes.
	* Removed the scroll and fadein effects.

v2.2a - 06/06/2008

	* Fixed the Visual Configuration Panel. It had conflicting include's when run for the first time. It made the FM unusable.

v2.2 - 06/06/2008

	* Added Visual Configuration Panel. Removed the need to edit files directly. Used my own INI Parser.
		(Note: if you would like mPFM to detect more file types, you have to edit 'include/settings.php' ONLY the settings related to file extensions)
	* Implemented user/group based access, each group with its own access to FM Actions.
	
v2.1 - 03/06/2008

	* Fixed actions to work for current loaded folder.
	* Fixed chmod for folders to chmod folders as well (it only chmoded files).
	* Changed login style to rely on cookies rather than on sessions.
	* Added checking for permissions when clicking on an action link.
	* Fixed tree generation for files that contain dots, commas, inverted commas ("), whitespaces etc.
	* Fixed the way the file manager looked in IE 7.0.
	* Images can now be viewed even if the $scandir variable is set to an absolute path.
	* Added some nice effects on first page load and for each folder contents load.
	* Added TinyMCE WYSIWYG controls if they are needed when editing a source file. I also added TinyMCE Compressor PHP to reduce the loading time of TinyMCE.

v2.0 - 02/06/2008

	* Redesigned mPFM using AJAX. (jQuery)
	* Improved unique id generation for Tree view. (again)
	* Added the display of symbolic folder link's real path.

v1.6 - 31/05/2008

	* Improved unique id generation for Tree view.
	* Added detection of symbolic links in Main view.
	* Improved disk stats in Main view. (shows partition Free Space %, Free Space GB, Total Space GB)
	* Minor code and visual improvements.

v1.5 - 30/05/2008
	
	* Redesigned the Tree view using the code from http://www.TreeView.net. (Distributor's License included)
	* Added recognition of Symbolic links within the Tree view.
	* Added a variable that controls wether the Tree view should refresh or not after N seconds (N is configurable).
	* Added select file/folder by clicking anywhere on its row.
	* Added setting for truncating filename names if their length is greater than this setting.
	* Rearraged the Delete/Move/Copy/Download/Check All/Check None/Invert Check icons.
	* Added version identifier in the main view, near the logo.
	* Minor adjustments to multi_editor.php regarding the displayed text.
	* Changed the top menu actions' appearance some more.

v1.4 - 28/05/2008

	* Removed [] from top menu icons, changed their appearance a bit.
	* Modified a bit and centered the text from multi_editor.php based on window height and width.
	* Changed Delete/Move/Copy/Download/Check All/Check None/Invert Check text to image icons in the main view.
	* Made the tree view reflect the current folder by changing the last clicked link's style.

v1.3 - 26/05/2008

	* Fixed bug introduced in v1.2 that made the FM unrecognize archive fily types.
	* Fixed bug with files/folders that have ' ' (space) in their names, did not archive properly. Now the ' ' are replaced by '_'.
	* Fixed bug with Downloading multiple folders AND files at once (with the checkboxes).

v1.2 - 25/05/2008

	* Removed the Zip/Rar functions for archives, they can be downloaded directly.

v1.1a - 25/05/2008

	* Fixed major bug introduced in previous version which made almost any action unusable.

v1.1 - 25/05/2008

	* Added password protection.
	* Fixed some minor bugs.

v1.0 - 24/05/2008

	* First Public Release.