Comments on: Ajax File Browser 3 Beta

By: jc

jc — Mon, 08 Feb 2010 05:37:54 +0000

Yes I know why. It’s because there’s a header not getting sent to the server. Usually this is prevented by anti virus, anti spyware or some firewalls even.

But this is no problem to fix. In the root folder of AFB, edit the file: _ajax.php

At the top of the page you’ll see this:
define(“SECURITY”,true);

Change that to be:
define(“SECURITY”, false);

and try again. This won’t really make your site any less secure, it was just paranoia.

By: James Stone

James Stone — Fri, 05 Feb 2010 10:32:26 +0000

I’ve a user who is getting the message

Error – This file is only visible from an Ajax File Browser webpage. Sorry!

Anyone know why this might be? I can’t replicate the error using their login details… am waiting back to hear what browser they have

By: mario oyunlar?

mario oyunlar? — Tue, 16 Jun 2009 14:45:30 +0000

it works thanks

By: FEDERICO

FEDERICO — Fri, 15 May 2009 16:04:25 +0000

Hello, i want to know if there’s a way to download a complete folder?
like doubleclicking the folder or something or if there’s anything like that
thanks

By: guest

guest — Mon, 09 Mar 2009 10:52:34 +0000

hi.
i installed the programm, but whenever i open the site, i get an error “no result returned”.
what to do about that?

By: theanykey

theanykey — Thu, 08 Jan 2009 19:57:44 +0000

Great work! I am trying to use this through a SonicWall SSL-VPN 2000. The URL is loaded as such: https://www.domainname.com/go/http://localip/afb/

and it tells me: Error, could not connect to server. it works great of course from the local network. Any ideas on this one?

By: cail

cail — Sun, 07 Dec 2008 22:33:58 +0000

Hi, thank you for the great scripts. I am using a patch http://sourceforge.net/forum/forum.php?thread_id=1851415&forum_id=685738 to display the date of upload. Do you think it will be possible to list the files based on the date? Thanks.

By: eXo

eXo — Thu, 06 Nov 2008 10:24:29 +0000

Indeed it was a miracle finding this App. Thank you so much.

Spanish characters don’t get displayed correctly.
Tryed recoding the spanish file to utf-8 and it works, but app gives errors.
Tryed replacing all charset_headers in app files and convert all files to ut-8, but app gives many more errors.

Tryed different combnination of charsets in apache and php.in with no luck.

Any suggestions? Thank you very much in advance.

By: kannagi

kannagi — Thu, 25 Sep 2008 18:39:55 +0000

Thanks for creating this program!! it’s exactly what i’m looking for and I’ve searched forever!

The only thing I would like to know is how to customize the front page text. What file/directory do i go in? or do i have to create a file? and where would I put it?

thanks!!

By: MLGraphics

MLGraphics — Tue, 29 Jul 2008 22:27:25 +0000

Here is the diff file of my patch:
57c57
$sql = “SELECT `blacklist_dir` FROM `”.TABLE_PREFIX.”blacklist_dirs`”;
62a63
> $blacklist_dirs = array_unique($blacklist_dirs);
66c67
$sql = “SELECT `blacklist_file` FROM `”.TABLE_PREFIX.”blacklist_files`”;
71a73
> $blacklist_files = array_unique($blacklist_files);
75c77
$sql = “SELECT `blacklist_extension` FROM `”.TABLE_PREFIX.”blacklist_ext`”;
80a83
> $blacklist_types = array_unique($blacklist_types);
88c91

\ Kein Zeilenumbruch am Dateiende.
—
> ?>

By: MLGraphics

MLGraphics — Tue, 29 Jul 2008 22:20:49 +0000

Hi,

here is a solution for Todds problem:
> Fatal error: Call to a member function on a non-object in
> home/toddhaynes/domains/kcwebplaza.com/public_html/filemanager/_includes/settings.inc.php
> on line 24
>
> This happens after I create a MySQL DB, go to index.php and fill out the form and click submit.

I installed AFB 3 beta on a Buffalo LinkStation Pro with Freelink (Debian) running. Mysql Version is 5.0.32-Debian_7etch6-log, PHP Version is 5.2.0-8+etch11, Linux Version is Linux LS-GL64C 2.6.12.6-arm1.
The Problem below occurs when an sql queue like “SELECT DISTINCT `blacklist_extension` FROM `”.TABLE_PREFIX.”blacklist_ext`”; is used on a table with more than one entry. This is the case in afb_blacklist_ext. To fix this problem, just remove the DISTINCT in all settings.inc.php files and add the following lines before “//get language file”:
$blacklist_files = array_unique($blacklist_files);
$blacklist_dirs = array_unique($blacklist_dirs);
$blacklist_types = array_unique($blacklist_types);

Background: DISTINCT selects entrys ignoring duplicates. This seems to be a problem on some systems. The fix is to select everything and later on remove the duplicates with array_unique()

Problably the programmer should apply this fix to the next release.

By: 100tral

100tral — Tue, 17 Jun 2008 13:00:14 +0000

Hi, first bravo and thanks you for afb 3, il love it.
But i have read about “approot” Parameter Remote File Inclusion Vulnerability in _includes/settings.inc.php

do you have solve this problem yet ?
merci thanks and sorry for my bad english !

By: Ipomina

Ipomina — Fri, 23 May 2008 15:19:10 +0000

Hi, Very nice job! It works perfectly.

I would like to know if it is possible to custonize the browser?

I would like to use a tree rather than an icon based browers….

By: jc

jc — Tue, 20 May 2008 07:42:40 +0000

a) Shares
Try using a relative path. It may also be that Apache does not have the permissions to traverse the directories above your chosen directory. As another (probably easier) solution, you could leave your directory within your webroot, but create a .htaccess file within it which can use some authentication or rewrite rules to deny direct access to the files.

b) Themes
You can set a theme for the entire site (the default) and you can also set a theme for each user, which is probably what you have done.

By: Rene

Rene — Mon, 19 May 2008 17:01:07 +0000

Hey, this would be the easiest solution but there is a problem. If i copy a share folder outsite the apche root and try within ajaxfb to set the absolute (/var/www/…. and so on) path to the share folder it tells me that the directory doesn`t exist. I checked twice, path, permissions …

Today i noticed something about the 3 themes. If i change the default theme it`s only active if you are not logged in. If you log in the default theme appears.

Thanks!

By: jc

jc — Sun, 18 May 2008 13:15:28 +0000

Hi Rene,

AFB is designed to be a Front end for the filesystem. Your files can exist anywhere on the server, yet still be downloaded through AFB.

The example link you have mentioned seems to be the real location of the file on your webserver, thus bypassing AFB when accessing it. You can move this test directory outside of your publicly visible website, then reference it’s relative or absolute location within the share settings to avoid this potential security issue.

Feel free to comment again if you need more help.

By: Rene

Rene — Fri, 16 May 2008 12:04:42 +0000

Hey, after playing around a bit i got confused about the permissions of files and folders. Now all my stuff is accessible through the web without logging in – http://domain.tld/share_no_1/testfile.zip can be downloaded! If i change the permissions files cant be uploaded or deleted. As i mentioned i am confused. Can you give me the “standard” permissions of files and folders that are used after a fresh ajax file browser installation? Thanks!

By: Mike

Mike — Wed, 26 Mar 2008 17:07:06 +0000

I am having the same issue as johnny, andyone know how to fix this? its really annoying.

By: johnny

johnny — Wed, 19 Mar 2008 14:30:00 +0000

I looked at the error logs on hosted server for my site, and it shows that its looking for a session directory..
Example of the error log:
PHP Warning: session_start() [function.session-start]: open(/var/php_sessions/sess_b3e7636e198e11c6c30284f100c6badc, O_RDWR) failed: No such file or directory (2) in /hermes/web01/b2325/pow.johnny2001/htdocs/fb/index.php on line 5
PHP Warning: session_start() [function.session-start]: open(/var/php_sessions/sess_b3e7636e198e11c6c30284f100c6badc, O_RDWR) failed: No such file or directory (2) in /hermes/web01/b2325/pow.johnny2001/htdocs/fb/index.php on line 5

Where do I define the session directory, in the php.ini ? or inside the Ajax FB ?
Is it a permission issue ?
If some knows, can you please email me at johnny2001@hotmail.com..
Thanks

By: johnny

johnny — Wed, 19 Mar 2008 04:46:03 +0000

Hi JC, thanks for this great tool.
I installed it(beta3), got the config as required, mysql tables populated, and then got to the login screen. I click on login and enter the user name and password as I did during setup, the screen goes back to the login screen.
Can someone please help ?
Thanks
Johnny