dirLIST - PHP Directory Lister
Screenshots
Description
dirLIST displays files and folders in a given HTTP/FTP directory. It has a wonderful interface with choice of Thumbnail or List view along with gorgeous icons for different file types. Includes a sleek gallery, web based mp3 player, file admin + more
Categories
License
Update Notifications
User Ratings
User Reviews
-
A really nice framework that helped me a lot!! But, unfortunately it's ful of XSS vulnerabilities. I wrote my own sanitizer functions; i inserted this into admin_login.php; // Clean GET Parameters function clean_get($str){ $folder = $_GET['folder']; $XSS = "/[\>\<\;\\,]/"; $Matcher = preg_match($XSS, $folder); if($Matcher == '1'){ return ''; } else{ return $_GET['folder']; } } $GFolder = clean_get($_GET['folder']); // Clean PosParameters function clean_post($str){ $folder = $_POST['folder']; $XSS = "/[\>\<\;\\,]/"; $Matcher = preg_match($XSS, $folder); if($Matcher == '1'){ return ''; } else{ return $_POST['folder']; } } $PFolder = clean_post($_POST['folder']); And changed all $_GET['folder'] parameters to $GFolder and all $_POST['folder'] parameter i did the same in index.php :) which prevented the cross-site scripting vulnerabilities.
-
i found a way to make it 'admin only' upload... Open 'index.php' and do these 2 small steps... Change this: //File uploading if($file_uploads == 1 && $listing_mode == 0) { ?> To This: //File uploading if($_SESSION['logged_in']) { if($file_uploads == 1 && $listing_mode == 0) { ?> Change this: //File uploading -done } ?> To this: //File uploading -done } } ?>
-
works perfectly.
-
This is simply the best script for this usage that I have found. Whether it is an audio file or an image file, it just works great! It looks great! And it is super easy to work with! Congratulations to the developer! You have done a fantastic job!
-
dir-list is fast and easy to use
-
Thank you hamoodyjamal, the best file directory and so many options, - changed also the upload to admin only - added a header line What does not work: when you hide the file extensions you can not rename the files, folder renaming works. Thumbnails work only when file extensions are shown. So better do NOT hide the file extensions for now. Wish list: feature to add URLs like contact or links to external web pages in the list. GREAT WORK!