Hi, Is it possible to change the value of the path on the modal into real path of the file/image? I tried to open the js file, and it shown e.selectedItem.path. I don't know where i can set/change this variable value.

The real path should be like https://domain.com/images/upload/0a8bbd26b03ed2b619ca12fe8e4b2e2c.jpg

Thanks

Вечер добрый. Сразу к сути, у меня на s3 под каждого пользователя создается в корне корзины (bucket) своя папка с подпапками, скажем ivanov_1 и ее подпапки images, filemanager, articles, .... Как правильно настроить UsersACLRepository, чтобы при загрузке чего либо в редакторе, пользователь видел только одну подпапку в своей главной папке? И второй вопрос, зачем метод getUserID переопределяется в UsersACLRepository, можно вместо id что-то отдавать другое? Спасибо

Сам UsersACLRespository

<?php

namespace App\Repository;

use Alexusmai\LaravelFileManager\Services\ACLService\ACLRepository;

/**
 * Class UsersACLRepository
 * @package App\Repository
 */
class UsersACLRepository implements ACLRepository
{
    /**
     * Get user ID
     *
     * @return mixed
     */
    public function getUserID()
    {
        return \Auth::user()->id;
    }

    /**
     * Get ACL rules list for user
     *
     * @return array
     */
    public function getRules(): array
    {
       $dir = \Auth::user()->name . '_' .\Auth::user()->id;
        return [
            ['disk' => 's3', 'path' => $dir.'/fm/*', 'access' => 2],
        ];
    }
}

Сам конфиг fm

<?php

return [

    /**
     * list of disk names that you want to use
     * (from config/filesystems)
     */
    'diskList'  => ['s3'],

    /**
     * Default disk for left manager
     * null - auto select the first disk in the disk list
     */
    'leftDisk'  => null,

    /**
     * Default disk for right manager
     * null - auto select the first disk in the disk list
     */
    'rightDisk' => null,

    /**
	 * Default path for left manager
	 * null - root directory
	 */
	'leftPath'  => null,

	/**
	 * Default path for right manager
	 * null - root directory
	 */
	'rightPath' => null,

    /**
     * Image cache ( Intervention Image Cache )
     * set null, 0 - if you don't need cache (default)
     * if you want use cache - set the number of minutes for which the value should be cached
     */
    'cache' => null,

    /**
     * File manager modules configuration
     * 1 - only one file manager window
     * 2 - one file manager window with directories tree module
     * 3 - two file manager windows
     */
    'windowsConfig' => 2,

    /***************************************************************************
     * Middleware
     * Add your middleware name to array -> ['web', 'auth', 'admin']
     * !!!! RESTRICT ACCESS FOR NON ADMIN USERS !!!!
     *
     * !!! For using ACL - add 'fm-acl' to array !!! ['web', 'fm-acl']
     */
    'middleware' => ['web', 'auth', 'fm-acl'],

    /***************************************************************************
     * ACL mechanism ON/OFF
     *
     * default - false(OFF)
     */
    'acl' => true,

    /**
     * Hide files and folders from file-manager if user doesn't have access
     * ACL access level = 0
     */
    'aclHideFromFM' => true,

    /**
     * ACL strategy
     *
     * blacklist - Allow everything(access - 2 - r/w) that is not forbidden by the ACL rules list
     *
     * whitelist - Deny anything(access - 0 - deny), that not allowed by the ACL rules list
     */
    'aclStrategy'   => 'blacklist',

    /**
     * ACL rules repository
     *
     * default - config file(ConfigACLRepository)
     */
    'aclRepository' => \App\Repository\UsersACLRepository::class,
    //'aclRepository' => Alexusmai\LaravelFileManager\Services\ACLService\ConfigACLRepository::class,
    //'aclRepository' => Alexusmai\LaravelFileManager\Services\ACLService\DBACLRepository::class,

    /**
     * ACL rules list - used for default repository
     *
     * 1 it's user ID
     * null - for not authenticated user
     *
     * 'disk' => 'disk-name'
     *
     * 'path' => 'folder-name'
     * 'path' => 'folder1*' - select folder1, folder12, folder1/sub-folder, ...
     * 'path' => 'folder2/*' - select folder2/sub-folder,... but not select folder2 !!!
     * 'path' => 'folder-name/file-name.jpg'
     * 'path' => 'folder-name/*.jpg'
     *
     * * - wildcard
     *
     * access: 0 - deny, 1 - read, 2 - read/write
     */
    'aclRules'      => [
        null => [
            ['disk' => 'public', 'path' => '*', 'access' => 0]
        ],
       /* 1 => [
        	['disk' => 's3', 'path' => '*', 'access' => 2]
        ]*/
    ],

    /**
     * ACL Rules cache
     *
     * null or value in minutes
     */
    'aclRulesCache' => null,
];

Hello it's possible to declare a new disklist in controller ?

i've lot of sftp information, i would like to update the diskList from Config::set("file-manager.diskList", [$newDisk])

Thk

i have many chinese filename in the folder, but only show part of filename, it's seems filename broken with some character like '-' or something i don't know. please tell me how to fix the problem.

釋迦牟尼佛介紹-2019.jpg => -2019.jpg 變身金母介紹-2019-修改.jpg => -2019-修改.jpg 講授道果-logo.png => -logo.png 穢跡金剛logo-小檔.jpg => logo-小檔.jpg 諸尊名諱20171211更新.jpg => 20171211更新.jpg

after do all steps of installation and configuration without any error the view file still empty ! also i try to check the paths and all configs are ok

Hi,

I would like to report an unrestricted file upload in laravel-file-manager

Steps To Reproduce

• Set config allowFileTypes For example ['jpg', 'jpeg', 'png', 'gif']
• Open Url laravel-file-manager and upload any PHP code and change file extension to image extensions
• Rename File.png to File.php

Proof of concept (POC)

https://i.imgur.com/n8hoQNv.gif

Impact

The consequences of unrestricted file upload can vary, including complete system takeover, an overloaded file system or database, forwarding attacks to back-end systems, and simple defacement. Here is the list of attacks that the attacker might do: Compromise the webserver by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and so forth. Put a phishing page into the website. Put a permanent XSS into the website. Bypass cross-origin resource sharing (CORS) policy and exfiltrate potentially sensitive data. Upload a file using a malicious path or name which overwrites critical file or personal data that other users access. For example; the attacker might replace the .htaccess file to allow him/her to execute specific scripts.

Fix

Should be not allowed to change extensions

Thanks!

->file-manager file as follow:

<?php

namespace App\fileManager;

use Alexusmai\LaravelFileManager\Services\ACLService\ACLRepository;

class ConfigACLRepository implements ACLRepository
{

    public function getUserID()
    {
        return auth()->id();
    }

    public function getRules(): array
    {

        if (auth()->id() === 1) {
            return [
                ['disk' => 'publicUpload', 'path' => '*', 'access' => 2],
            ];
        }

        return [
            ['disk' => 'publicUpload', 'path' => 'users/'. \Auth::user()->name .'/*', 'access' => 2],  // read and write
           ];
    }
}

i have bellow structure folder uploads/users/vahid i need show content vahid folder when vahid is logined but display error access denied for vahid

I've followed all the instruction from installation. But I am unable to do anything. I can't upload file, I can't create folder. When I click on upload icon nothing happens.

Here's my file-manager.php

use Alexusmai\LaravelFileManager\Services\ConfigService\DefaultConfigRepository;
use Alexusmai\LaravelFileManager\Services\ACLService\ConfigACLRepository;

return [

    /**
     * Set Config repository
     *
     * Default - DefaultConfigRepository get config from this file
     */
    'configRepository' => DefaultConfigRepository::class,

    /**
     * ACL rules repository
     *
     * Default - ConfigACLRepository (see rules in - aclRules)
     */
    'aclRepository' => ConfigACLRepository::class,

    //********* Default configuration for DefaultConfigRepository **************

    /**
     * List of disk names that you want to use
     * (from config/filesystems)
     */
    'diskList' => ['local'],

        /**
     * Default disk for left manager
     * null - auto select the first disk in the disk list
     */
    'leftDisk'  => 'local',

    /**
     * Default disk for right manager
     * null - auto select the first disk in the disk list
     */
    'rightDisk' => null,

    /**
     * Default path for left manager
     * null - root directory
     */
    'leftPath'  => null,

    /**
     * Default path for right manager
     * null - root directory
     */
    'rightPath' => null,

    /**
     * Image cache ( Intervention Image Cache )
     *
     * set null, 0 - if you don't need cache (default)
     * if you want use cache - set the number of minutes for which the value should be cached
     */
    'cache' => null,

    /**
     * File manager modules configuration
     *
     * 1 - only one file manager window
     * 2 - one file manager window with directories tree module
     * 3 - two file manager windows
     */
    'windowsConfig' => 2,

    /**
     * File upload - Max file size in KB
     *
     * null - no restrictions
     */
    'maxUploadFileSize' => 5000,

    /**
     * File upload - Allow these file types
     *
     * [] - no restrictions
     */
    'allowFileTypes' => [],

    /***************************************************************************
     * Middleware
     *
     * Add your middleware name to array -> ['web', 'auth', 'admin']
     * !!!! RESTRICT ACCESS FOR NON ADMIN USERS !!!!
     */
    'middleware' => ['web'],

    /***************************************************************************
     * ACL mechanism ON/OFF
     *
     * default - false(OFF)
     */
    'acl' => false,

    /**
     * Hide files and folders from file-manager if user doesn't have access
     *
     * ACL access level = 0
     */
    'aclHideFromFM' => true,

    /**
     * ACL strategy
     *
     * blacklist - Allow everything(access - 2 - r/w) that is not forbidden by the ACL rules list
     *
     * whitelist - Deny anything(access - 0 - deny), that not allowed by the ACL rules list
     */
    'aclStrategy' => 'blacklist',

    /**
     * ACL Rules cache
     *
     * null or value in minutes
     */
    'aclRulesCache' => null,

    //********* Default configuration for DefaultConfigRepository END **********


    /***************************************************************************
     * ACL rules list - used for default ACL repository (ConfigACLRepository)
     *
     * 1 it's user ID
     * null - for not authenticated user
     *
     * 'disk' => 'disk-name'
     *
     * 'path' => 'folder-name'
     * 'path' => 'folder1*' - select folder1, folder12, folder1/sub-folder, ...
     * 'path' => 'folder2/*' - select folder2/sub-folder,... but not select folder2 !!!
     * 'path' => 'folder-name/file-name.jpg'
     * 'path' => 'folder-name/*.jpg'
     *
     * * - wildcard
     *
     * access: 0 - deny, 1 - read, 2 - read/write
     */
    'aclRules' => [
        null => [
            //['disk' => 'public', 'path' => '/', 'access' => 2],
        ],
        1 => [
            //['disk' => 'public', 'path' => 'images/arch*.jpg', 'access' => 2],
            //['disk' => 'public', 'path' => 'files/*', 'access' => 1],
        ],
    ],
];

Here's my home.blade.php

@extends('layouts.app')

@section('content')
<div class="container">
    <div style="height: 700px;">
        <div id="fm"></div>
    </div>
</div>
@endsection

Here's my app.blade.php

<!DOCTYPE html>
<html lang="{{ str_replace('_', '-', app()->getLocale()) }}">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    <!-- CSRF Token -->
    <meta name="csrf-token" content="{{ csrf_token() }}">

    <title>{{ config('app.name', 'Laravel') }}</title>

    <!-- Scripts -->
    <script src="{{ asset('js/app.js') }}" defer></script>

    <!-- Fonts -->
    <link rel="dns-prefetch" href="//fonts.gstatic.com">
    <link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">

    <!-- File Manager CSS -->
    <link rel="stylesheet" href="{{ asset('vendor/file-manager/css/file-manager.css') }}">

    <!-- Styles -->
    <link href="{{ asset('css/app.css') }}" rel="stylesheet">

    <!-- Font Awesome 5 -->
    <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.7.0/css/all.css">
    
    <!-- Bootstrap 4 -->
    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css">
   
    <!-- CSRF Token -->
    <meta name="csrf-token" content="{{ csrf_token() }}">
</head>
<body>
    <div id="app">
        <nav class="navbar navbar-expand-md navbar-light bg-white shadow-sm">
            <div class="container">
                <a class="navbar-brand" href="{{ url('/') }}">
                    {{ config('app.name', 'Laravel') }}
                </a>
                <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="{{ __('Toggle navigation') }}">
                    <span class="navbar-toggler-icon"></span>
                </button>

                <div class="collapse navbar-collapse" id="navbarSupportedContent">
                    <!-- Left Side Of Navbar -->
                    <ul class="navbar-nav mr-auto">

                    </ul>

                    <!-- Right Side Of Navbar -->
                    <ul class="navbar-nav ml-auto">
                        <!-- Authentication Links -->
                        @guest
                            <li class="nav-item">
                                <a class="nav-link" href="{{ route('login') }}">{{ __('Login') }}</a>
                            </li>
                            @if (Route::has('register'))
                                <li class="nav-item">
                                    <a class="nav-link" href="{{ route('register') }}">{{ __('Register') }}</a>
                                </li>
                            @endif
                        @else
                            <li class="nav-item dropdown">
                                <a id="navbarDropdown" class="nav-link dropdown-toggle" href="#" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" v-pre>
                                    {{ Auth::user()->name }} <span class="caret"></span>
                                </a>

                                <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdown">
                                    <a class="dropdown-item" href="{{ route('logout') }}"
                                       onclick="event.preventDefault();
                                                     document.getElementById('logout-form').submit();">
                                        {{ __('Logout') }}
                                    </a>

                                    <form id="logout-form" action="{{ route('logout') }}" method="POST" style="display: none;">
                                        @csrf
                                    </form>
                                </div>
                            </li>
                        @endguest
                    </ul>
                </div>
            </div>
        </nav>

        <main class="py-4">
            @yield('content')
        </main>
    </div>

        <!-- File Manager JS -->
    <script src="{{ asset('vendor/file-manager/js/file-manager.js') }}"></script>

</body>
</html>

Here's screenshot of application where the loading icon is showing.

I'm using XAMPP Version 7.3.9.

Hi,

Sorry for this post i know it's a configuration issue but i have 2 error 500. https://gyazo.com/6a4f114b3b5d89e7d2ef7eaeef341671

This works fine in local but not on production.

The production machine is setup with debian 9 & nginx.

I have tried to fix permissions folders and files without success.

Do you have any idea ?

Thank's in advance for you're help.

I am Using this code to call file-manager in tinymce file_picker_callback (callback, value, meta) { let x = window.innerWidth || document.documentElement.clientWidth || document.getElementsByTagName('body')[0].clientWidth let y = window.innerHeight|| document.documentElement.clientHeight|| document.getElementsByTagName('body')[0].clientHeight

    tinymce.activeEditor.windowManager.openUrl({
      url : '/file-manager/tinymce5',
      title : 'Laravel File manager',
      width : x * 0.8,
      height : y * 0.8,
      onMessage: (api, message) => {
        callback(message.content, { text: message.text })
      }
    })
  },

The image is successfully selected but then in editor there is this issue.

Hello guys,

I am building a blog page with managing images from S3 by this lib. The lib is so perfect without any problem.

However, the users would like to be able cropping an image without impact to original one, therefore they don't need renaming and uploading new one from local to continue cropping.

It's very nice if the lib exists the above feature.

More suggestion: auto add suffix like "file (1)" when pasted

Thanks

Error: Call to undefined function Alexusmai\LaravelFileManager\Services\ACLService\fnmatch() in file /www/panel/vendor/alexusmai/laravel-file-manager/src/Services/ACLService/ACL.php on line 49

I have set in the config file middleware to auth instead of web and login to the application Auth is working fine but when I navigate to file manager it shows me an error "401 - Unauthenticated."