SquirrelMail  
Donations
News
About
Support
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties













Security Notice
Phishing campain
Version 1.4.15
Security Upgrade
Plugins - File Manager
Category: Add-ons

Allows designated users file management access to a pre-defined portion of the host machine's file system. Users can upload and edit files, list directories, delete files and directories, save mail attachments locally, send files as email attachments, etc. Only users listed in the plugin's configuration file have access to this plugin, and their access is limited to one or more top-level directories listed therein. Please read the "Security" section of the README for important info about file permissions.


Version 2.0
by Paul Lesniewski on Mar 13, 2003
Please support this plugin's development: Donate to this author
[ file_manager-2.0-1.2.7.tar.gz tarball (26696 d/l) Help ]
Requires: SquirrelMail 1.2.7, Compatibility plugin, PHP 4.0.6

Description:
  • Upgraded for compatibility with SquirrelMail 1.4 (SquirrelMail 1.4 no longer needs to have its compose.php patched to work with File Manager!)
Make sure to download the Compatibility plugin in order for File Manager to function correctly.

Version 1.6.3
  • Fix for SquirrelMail installations with problematic session issues. This is not specifically a File Manager problem (you are strongly advised to solve your session problems for real), but since File Manager provides sensitive access to your server, this fix prevents File Manager permissions from being "left over" in users' browsers.

Older versions

Version 1.6.2
by Paul Lesniewski on Feb 22, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description: Mostly bug fixes this release:
v1.6.2:
  • Fix for browsers that had problems when trying to attach local files to emails.

v1.6.1:
  • Fix for attaching files to replies (message text showing up in File Manager interface and fields such as To:, Cc:, and possibly message body were being lost). New versions of SquirrelMail's compose.php are included in this release, so please make sure to replace compose.php for error-free functionality.
  • Fixed compatibility with autocomplete plugin (horrible microsoft issue around variable scope... argh)
  • Custom patched compose.php has a small fix (unrelated to File Manager) having to do with lost attachments.
  • New setup.php format for faster performance.


Version 1.6
by Paul Lesniewski on Jan 29, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description: Tons of new features and fixes. Up next will be SM 1.4.x compatibility; stay tuned. This is what is in this release:
  • Users may now add attachments (as many as needed) to new messages from File Manager using a link on the compose page (NOTE - be sure to follow the instructions in the INSTALL file to replace SquirrelMail's compose.php in order for this to work correctly).
  • Added binary file detection and disallow/allow editing binary files (per-user or global) (currently not sensitive to non-English chars - ideas anyone?)
  • "Save" and "Save And Close" functionalities now available when editing files.
  • Adjustable sizing of file editing text area; sizing is stored in user preferences.
  • Added quota overrides for "shared directories" (Thanks to Harley [harley at remotech.com])
  • Added anti-virus scanning hooks for checking uploaded files for infections.
  • New .users user configuration file (old config files are still supported however). (Thanks to Berend Tober [btober at seaworthysys.com])
  • Viewing files can be done in same or separate window - settable by admin or individual users
  • Added config parameter to allow sysadmin to ensure edited files are stored with newlines that are correct for the host operating system.
  • Current user's file_manager config info is kept in the SM session so the .users file doesn't need to be read more than once.
  • Fixed disappearing ampersand signs when editing html files.
  • Attachments are now saved using the default file permissions given in the config file.
  • Javascript fix - now trims off extra spaces when user enters file names
  • Fixed minor javascript error when uploading files.
  • Locale fix for those of you who don't have php compiled with gettext support. File manager should no longer prevent other parts of SquirrelMail from showing up in the right language. (Thanks to Alexandros Vellis [avel at noc.uoa.gr])
  • Lithuanian translation - complements Tomas Kuliavas [tokul at users.sourceforge.net]
  • Polish translation - complements Franciszek Lewenda [franek at nask.pl]
  • Mailto: links changed to be SquirrelMail compose links (duh!). Thanks to Harley [harley at remotech.com] for catching that one.


Version 1.5
by Paul Lesniewski on Nov 1, 2002
[ file_manager-1.5-1.2.7.tar.gz tarball (3991 d/l) Help ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description:
  • Save email attachments locally (to host server)
  • Send any file as an email attachment (the edit/view/download/send links are beginning to crowd the page layout; you might want to try using the $fileEditStyle='hyperlink' setting)
  • Multiple file upload functionality
  • Multiple base directory configuration option (going forward, you should update your config file with "baseDir1" instead of "baseDir", however, it is backward compatible without making any config changes!)
  • Added sample script to automate the population of the config file for large user bases (complements Ken Wilson [kaw at wilberforce.ac.uk])
  • Added compatibility for plugin updates tool
  • Internationalization! Translators wanted - email me if you're interested (so far: German, complements Hans Pech [hanspech at gmx.net]; coming soon: Polish).


Version 1.4.5
by Paul Lesniewski on Oct 17, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description:
  • New README file - please do READ it! (Kenneth G. Kirk [kkirk at christtheteacher.org] gets all the credit for this thankless job (THANKS!!!).)
  • Minor bug fix checking upload file size (thanks to Jimmy Conner [jimmy at advcs.org])
  • Fixed BACK link that wasn't working in some environments (thanks to Matthew Kennedy's [mkennedy at dnetworking.com] patience testing!).
  • Suppress warnings when calculating quota


Version 1.4
by Paul Lesniewski on Oct 10, 2002
[ file_manager-1.4-1.2.7.tar.gz tarball (2857 d/l) Help ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description:
  • Implemented quota checking
  • Added Revert button when editing a file (thanks Hans Pech)
  • Removed old code that was accidentally placing temp files in the SM attachments directory


Version 1.3
by Paul Lesniewski on Oct 9, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7, PHP 4.0.6

Description: Whew here goes. Thanks to excellent feedback from Ryan [ryan at vendetta.com], Kenneth Kirk [kkirk at christtheteacher.org], and Rene [rene.madsen at webscorpion.com], lots of new functionality has been added:
  • Implemented copy functionality
  • Moved edit from the button row to be a link
  • Symlinks get some color!
  • BACK link at bottom of file list
  • File edit link can also by a hyperlink (w/custom color)
  • Fixed bug when downloading nonexistent files
  • Added $chmodOK to allow sysadmins to turn off all chmod code in the entire plugin in one place
  • Added file download/view functionality
  • Added file sorting
  • Added CHMOD functionality (can turn on/off per user)
  • Disallow user to view symlinks (can turn on/off per user)
  • Added move/rename functionality. User must enter path manually (I'd like to provide a way for them to browse in a popup window or the likes and select the target by clicking on it). Protection is included to disallow moving anything above the user's base directory.
  • Made default permissions (and umask) used when creating files and directories configurable.


Version 1.1
by Paul Lesniewski on Sep 24, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7 (ish), PHP 4.2.1 (ish)

Description:
  • Disallow users from attempting to edit directories
  • Potential security hole when uploading files fixed (props to Ryan at vendetta.com!!)
  • Protect files from being overwritten unless user checks a checkbox
  • Dynamic "smart" file name checks to avoid getting a message about duplicate file names AFTER waiting for a (possibly large) file to upload.


Version 1.0
by Paul Lesniewski on Sep 23, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7 (ish), PHP 4.2.1 (ish)

Description: Initial revision. Please send email with your feedback, especially security concerns. Future ideas are along the lines of:
  • Move files function -- need a clean way for user to select target directory. Pop up a small window where the user can browse to the target?
  • Rename functionality
  • Copy functionality (is this overkill?)
  • Multiple file upload
  • Implement quota functionality.
  • Limit editing of files to text files only. (How? Using file extensions is easy, but not a definitive solution.)
  • Allow limited access to file execution or certain tools (untar/unzip, etc)?? From a security perspective, this may be disasterous.
  • Allow more than one base directory per user


If you have problems with the download or decompressing...
Internet Explorer
Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape
Right-click on the file, then select "Save Link As"
Opera
Right-click on the file, then select "Save Link Document As"
Lynx and Links
Press "d" on the link to download the file directly.
  • Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
  • Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
  • If all else fails, seek our help
© 1999-2010 by The SquirrelMail Project Team