phpWebFTP / News: Recent posts

Version 3.3b is out now. Compared to 3.2 this version has some new functionality. It is now possible to download an entire directoy in one go. The phpWebFTP script will download all individual files, add them to a zip file and sends the zip file to the user. Furthermore the script is more secure than the previous versions. All variables are posted (rather then the get method).
IMPORTANT:
arko.dhar has discovered a vulnerability in phpWebFTP, which can be exploited by malicious people to disclose sensitive information. Input passed to to the "language" parameter in index.php wasn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from local resources. ... read more

Thanks to the contribution of Maxime Gamboni we released version 2.7 of phpWebFTP today.

The following changes have been made:
- New language files : Danish
- Corrected all language files (changed WebFTP to phpWebFTP)
- Bug solved : ASCII/Binary button behaves unexpected
- Configurable default language (config.inc.php)

Changes by Maxime Gamboni, www.gamboni.org :
- register_globals no longer required
- fixed a bug that would keep logging off all the time after first logoff
- strip clientside-path for uploads
- really forbid defaultServer override when editServer=false... read more

Version 2.6 has been released today. It contains some valuable additions from other users like:

- New language files : Croatian, Czech, Latvian
- Added support for filenames that contain non-western characters.
- Resuming broken downloads (requires PHP 4.3.0 or higher). Configurable in config.inc.php
- Configurable default server

Go to the download page and download your copy!