clem’s labs: entry

The Buzz {3 trackbacks/pingbacks}

1. Pingback: FTP Download help requested. - Aimbots.net on November 8, 2008
2. Pingback: 今日のリンク | Oyaji Blog on May 8, 2009
3. Pingback: W2box - File repository! | Gomah TV © 2009 on May 22, 2009

The Conversation {64 comments}

1. Ahmaz 13 October, 08 @ 6:56 am

   Great program..has a lot of potential!

2. Ahmaz 13 October, 08 @ 7:12 am

   Oh by the way, folder support won’t work without enabling direct link support =o
   But then again, it’s still a WIP ;]

3. Michael 14 October, 08 @ 10:37 pm

   Hi AHMAZ,

   U manage to get the folders to work? how to enable direct link support = 0?

4. Ahmaz 17 October, 08 @ 2:52 am

   Hi Michael,
   Actually I did not get it to work….I keep getting 404 errors. I’m pretty sure I’ve set everything right…

   What I meant with the last comment was that in order for folder support to work, you needed to enable direct link support. Logically, it can be enabled through config.php

5. Hi Profile 20 October, 08 @ 11:32 am

   I can’t seem to get the cgi file to work to show file upload progress bar.
   The manager works great and the file uploads are wokrling fine. I get the following message from the upload.cgi file when it is run. ” The tmp directory doesn’t exist. Please correct upload.cgi!” hen the file does not upload
   If i change the line $config['upload_progressbar']=false; o $config['upload_progressbar']=true; in the config file.
   Any suggestions or ideas as the how to properly setup the path. I ususally just leave the tmp path as tmp and it works okay for other scripts. I have also tried the direct path fro mthe server to a temp folder. I also chmod the temp folder to make sure it can write to the folder but still not luck. thansk for any tips etc..
   cheers

6. Mike 21 October, 08 @ 10:17 pm

   AWESOME product. I was impressed with how easy it was to install and configure.

   Feature requests =):

   - Ability to restrict the total amount of disk space taken up… that way malicious users can’t eat up the entire hard disk.

   - E-mail notifications. Ability for admins to become aware if/when a file is uploaded.

   - Upload/Download rights by one-time use tags. Combined with e-mail notifications. Just a thought. =)

   Thank you again for making this app. IT’s sooooo helpful!

7. Dexter 22 October, 08 @ 4:06 pm

   really great script!
   I’ve tweaked it to suite my needs and its really easy to modify.

   One thing that it misses is the password protection for each directory, I’m working on a mod that can implement it

   It should need:
   -new boxes in the form (username/password)
   -if around the script to print out a lock icon on selected folders
   -htaccess creation/update for each directory

8. clem 23 October, 08 @ 10:43 am

   @HiProfile:
   Using full unix path instead of relative path might helps. You should edit the upload.cgi file to correct this.

   Cheers

9. JURI 24 October, 08 @ 4:37 pm

   Hi
   very interesting script!

   But it upload files without upload.cgi… Why?
   I try local (WindowsXP, EasyPHP1-8, w2box 3.3.2 )

   Script worked normally.

   Further I attempted enable progress bar.
   I set temporary dir to “/tmp” in upload.cgi, config.php and $config['upload_progressbar']=true.
   But progress bar do not work.

   I watched for temporary files (“xxxx_postdata”, “xxxx_flength” …)
   where uploading big files.
   But I have not seen it …

   Then I deleted upload.cgi
   I was surprised, script prolonged to work, and normally uploaded files

   Why ??????????

   P.S.
   w2box 4.0.0Beta5 worked without upload.cgi too

10. interesteduser 28 October, 08 @ 3:25 pm

    Did the 4.0.0Beta5 version fix the vulnerability identified in Bugtraq ID: 23975?

    If so, please notify SecurityFocus: http://www.securityfocus.com/bid/23975/solution

11. Jank 28 October, 08 @ 5:33 pm

    Great project! I too am having problems with the folders. Error 404, keeps coming up…I tried .htaccess, and checked to make sure the .htaccess support and mod_rewrite was enabled….

    I will look into trying to enable the direct link support via the config.php

    Any additional thought on the folder support CLEM?

    Thanks,
    Jank

12. clem 31 October, 08 @ 5:57 pm

    @JURI:
    upload.cgi is needed only when the progress bar is active.
    @interesteduser:
    yes, there shouldn’t be any exploit now otherwise my demo site would be hacked.
    @Jank:
    404 for folders is usually a non working mod_rewrite or htaccess support. Be sure that it works. you might contact your webhost.

13. amorvi 02 November, 08 @ 3:55 am

    Hey, great script thanks works just as wanted.

    I have a question about dates, both those used in the log and in the table to show when a folder was updated. How would I change those to reflect UTC time?

    Thanks again!

14. PinesSigns 05 November, 08 @ 4:26 pm

    Hi All, great app. Question:

    I’ve password protected the directory that this application sits in with .htaccess, however, now when I try and log-in to admin, it fails. It will not accespt the user/pass at all. Is there a conflict I am unaware of? Is my htaccess file missing something?

    AuthUserFile .htpasswd
    AuthGroupFile /dev/null
    AuthName “EnterPassword”
    AuthType Basic

    require valid-user

    RewriteEngine on

    RewriteCond %{QUERY_STRING} ^$
    RewriteRule ([^\s]+).php$ $1.php?BAD_HOSTING=%{HTTP:Authorization}

    RewriteCond %{QUERY_STRING} ^(.+)$
    RewriteRule ([^\s]+).php $1.php?%1&BAD_HOSTING=%{HTTP:Authorization}

15. stan 06 November, 08 @ 4:27 pm

    interesting script, but very short on installation instructions. this is what I did:

    - set $config['upload_progressbar']=true; in config file
    - set tmp directory to “/home/username/tmp” (or whatever…) in both config and cgi file
    - upload all (non-cgi) files and (non tmp) directories to some directory on your server
    - upload tmp directory to place of your choice (if not already in place)
    - chmod data directory 777
    - upload cgi file to cgi directory on your server
    - chmod cgi file 755

    it now works for me if I set upload_progressbar=false. But if true, then I see no progress bar, and once upload is done, I get an error:

    Warning: chmod() [function.chmod]: Operation not permitted in /home/username/public_html/testupload/index.php on line 178

    the file is safely uploaded, so that is no problem, but the chmod didn’t work out. what is likely to be the problem? And why is there no progress bar?

16. PINESSIGNS 08 November, 08 @ 6:18 pm

    Any support? No one has tried to password protect the directory that W2BOX resides in? I’m almost 100% certain that its a conflict of interest for the administrator’s password to work when the directory is .htaccess’d.

    CLEM, can you assist?

    Thanks-

17. Signs Pembroke Pines 12 November, 08 @ 3:08 am

    What a bunch of slackers you guys are! I’m just messin’ around. I figured it out on my own dime… here’s the problem to all & Clem (suggest updating your ‘How could I password protect entriely w2box ?’ Faq above):

    You can’t have 2 HTTP authentications in the same layer. The config.php script uses HTTP auth to authenticate the administrator. Well, when you add HTACCESS to the mix, they conflict.

    The fix? So easy… just make sure your admin user/pass combo in the config.php script matches the admin user in your .htpasswd file.

    In my case, I have multiple users configured into my .htpasswd files.

    admin | alkj2;4j234jaj (matches config admin user/pass)
    ftpuser | 20-iia-sdf-0=2
    newb | 23042-3402-]sfdk
    newb2 | caisdfj9asdfas

    I reserved one for administrator and matched it up with the config.php scripts admin user/pass combo.

    The result? When you authenticate as the admin through .htaccess, the admin features are automatically enabled in the script.

    You don’t even need the “administrator” link in the footer anymore.

    I’ll be you guys later. Good luck to all!

18. clem 13 November, 08 @ 6:07 pm

    @amorvi:
    You can try to change your timezone date_default_timezone_set(’UTC’)
    @stan:
    php might not have the right to chmod. Remove the warnings or comment the line.
    @PINESSIGNS:
    Signs Pembroke Pines is right the admin password conflict with htaccess thus your should put the admin as a htaccess user as well.

19. Luciano 25 November, 08 @ 2:45 am

    Hi, great script, easy to use and modify. Can make it work on Apache, IIS6 with no ploblems, but with IIS7 there are “500 erro” all over, did anyone tryed this under IIS7?

20. Aw 27 November, 08 @ 3:02 pm

    Still cant get folders to work, istead of going to 127.0.0.1:8080/files/data/foldername
    it goes to 127.0.0.1:8080/files/foldername?

21. clem 28 November, 08 @ 3:06 pm

    @AW: It should be that way… it is not working because you haven’t mod_rewrite enable and the .htaccess file. Read the faq.

22. Mike 09 December, 08 @ 12:22 am

    Whenever I enable the upload.cgi bar, I’ll get errors that state that the filesize is larger than the filesize limit. But the .htaccess file is fine and the config.php is fine. What am I missing… seems to only happen for larger files >400 MB.

23. Morgan Daly 11 December, 08 @ 3:04 pm

    Hello,

    I am just wondering what happened to this feature?
    // if true, show file only for admin
    $config['hide_files'] = true;

    Thanks
    Morgs

24. DrWeB 11 December, 08 @ 3:46 pm

    Hi,

    Great script Clem !!!

    Just two questions :

    1) I can see the upload-bar, but it remains empty. The files are uploaded though.

    2) I would like that the people who visit the page;
    – can upload
    – can see the uploaded files and their size
    – but can’t download the files

    Kind regards,
    DrWeB

25. DrWeB 11 December, 08 @ 3:48 pm

    By the way, I’ve also translated the script in dutch :

    “Het verzonden bestand is groter dan de instelling upload_max_filesize van de php.ini”,
    2 => “Het verzonden bestand is groter dan de instelling MAX_FILE_SIZE van het HTML-formulier.”,
    3 => “Het verzonden bestand werd slechts gedeeltelijk verzonden.”,
    4 => “Er werd geen bestand verzonden.”,
    6 => “De tijdelijke map ontbreekt.”);

    $lang['upload_error_sizelimit'] = “Het verzonden bestand is te groot.”;
    $lang['upload_error_fileexist'] = “bestaat reeds in deze map.”;
    $lang['upload_error_nocopy'] = “Het is niet mogelijk om het bestand in deze map te kopiëren.”;
    $lang['upload_error_sid'] = “Het is niet mogelijk om het gevraagde bestand te vinden.”;
    $lang['upload_error_badext'] = “Dit bestandstype is niet toegestaan !”;
    $lang['make_error_exist'] = “Deze map bestaat reeds !”;
    $lang['make_error_cant'] = “Het is niet mogelijk om een nieuwe map te maken.”;
    $lang['make_error_maxdepth']= “U kunt geen sub-map meer maken.”;
    ?>

26. tjohio 12 December, 08 @ 1:39 am

    I noticed that Mike had a feature request for email notification. This would also be very helpful to me. I have done some coding and testing of email notification. The good news is that an email notification is sent. The bad news is that downloads no longer work properly. Maybe someone can figure this out, I’ve spent several hours and what I have found is that ANY change to index.php, causes downloads to stop working properly. Could this just be something unique to my server? Even just adding a blank space on a line gets the same result.

    Anyway, adding email notification was accomplished by adding these lines in config.php:
    //— email —
    $config['email_to'] = “youremail@your.domain”;
    $config['email_from'] = “From: your website [files]“;

    and this one line of code in index.php just before the end of the function logadm($str):
    mail($config['email_to'], $_SERVER["REMOTE_ADDR"].’ ‘. $str, date(”D M d Y H:i:s”).’
    ‘.$_SERVER["REMOTE_ADDR"].’ ‘. $str.”\n”, $config['email_from']);

    That’s it — three lines of code.

27. al 14 December, 08 @ 7:01 pm

    awesome script! only one problem tho… .htaccess isn’t supported by my server. i read the faq and deleted the file and it still redirects to the root. any help? i’m sure i’m missing something simple here… thanks in advance

28. tjohio 14 December, 08 @ 11:12 pm

    Regarding email notification, after further testing, I don’t know why this doesn’t work properly in v4.1, but it works just fine in v4.0 Beta5.

    Add this code to config.php:
    //— email —
    $config['send_email'] = true;
    $config['email_to'] = “youremail@your.domain”;
    $config['email_from'] = “your website name [files]“;

    Modify index.php – find function deletefile($cell){
    change this line:
    $str=substr($str, strpos($str,’href=”‘)+6);
    to this:
    $str=substr($str, strpos($str,’href=”‘)+16);

    Add this code to index.php, as the last thing in function logadm($str):
    // added email code
    if ($config['send_email']) {
    $to = $config['email_to'];
    $subject = $_SERVER["REMOTE_ADDR"].’ ‘. $str;
    $msg = date(”D M d Y H:i:s”).’ ‘.$_SERVER["REMOTE_ADDR"].’ ‘. $str.”\n”;
    $mailheaders = “From: ” . $config['email_from'];
    mail($to, $subject, $msg, $mailheaders);
    }
    // end added email code

    It functions perfectly in v4.0 not in v4.1???

29. clem 16 December, 08 @ 6:13 pm

    @mike: I never uploaded such large file. It might be some perl or apache limitation.
    @drweb: I guess you’ll have to do the change yourself as they are not standard behaviour. It should be fairly simple. ( you could just htpasswd the data folder to totally lock it)
    @tjohio: There aren’t much difference between the two version. It is certainly the change you do in the deletefile function. It shouldn’t be require.

30. ray 07 January, 09 @ 12:18 pm

    Hi,

    Great script. thx, just the thing i was looking for.
    I only have this proplem:

    I can see the upload-bar, but it remains empty until the file is uploaded, then the upload-bar goes immediately to 100%

    b.t.w. i’m using lighttpd

31. ray 13 January, 09 @ 12:42 pm

    switched to apache and the upload-bar is working now. only folders are not working -> 404 error

32. ray 13 January, 09 @ 12:57 pm

    my mistake. i accidentaly deleted the .htaccess file. folders are working now

33. fsmedh 24 January, 09 @ 2:53 am

    Cant get the progressbar working.

    The page works perfectly fine without it, but when i enable it theres just and empty bar, nothing happens and the file doesnt get uploaded.

    upload.cgi has 755

    Path to perl is correct

    perl upload.cgi returns that its working

    If i open it in a browser i only get the text in the file.

34. Andreas 31 January, 09 @ 11:13 pm

    Hi there,

    Thanks for a really useful and well programmed script.

    Took the liberty to add 2 snippets of code in it:
    - Line 27 in en.php: $lang['go_up'] = ‘Up one level’;
    - Line 475/475 in index.php
    $uplink = $lang['go_up'];
    echo ‘‘.$uplink.’‘;

    Makes the (go up) vary from language.

    One question though:
    I’ve enabled the progress bar and uploading works fine. However when uploading large files (30 mb+) the progress/status bar in IE6 says the upload completed, but the included progress bar is still at something like 85-90%. The file never arrives at the server either.

    Anyone know anything about this?

35. David Cog 08 February, 09 @ 3:28 pm

    Hi Clément,

    Great script. Thank you.

    I’ve spotted a bug: if you create a folder in w2box that is the same name as one of the install folders (data, images, lang, tmp), then clicking on that folder from the w2box interface produces a blank screen. E.g. http://clement.beffa.org/labs/apps/w2box-demo/images/ Any suggestions on a fix for that?

    Also, the header h1 URL always goes to the current page – so it’s actually of no use. I modified it so that it always goes to the root of the w2box data:

    <?php $path = rooturl(); echo ‘‘.$config['w2box_title'].’‘;?>

    Thanks again.

    David.

36. Flemming 09 February, 09 @ 3:08 pm

    where to send translations files – translated it to Danish…

    otherwise it is found at http://www.angler.dk/da.zip

37. verana_ss 17 February, 09 @ 10:58 am

    this is absolutely great!

    Im a very very beginner of server runner and couldnt run your prog at first, but finally, because of your kindness explanation, I could run your program.

    thankyou verymuch!

    verana_ss

38. Ugur onur 17 February, 09 @ 12:12 pm

    You can download Turkish Language file from
    http://www.5555.com.tr/1/tr.zip

    regards

    Ugur Onur

39. Davvan 18 February, 09 @ 4:30 pm

    Swedish languagefile

    “Den uppladdade filen överstiger upload_max_filesize inställningen i php.ini”,
    2 => “Den uppladdade filen överstiger MAX_FILE_SIZE inställningen som specificerades i HTML formuläret.”,
    3 => “Filen blev bara delvis uppladdad.”,
    4 => “Ingen fil blev uppladdad.”,
    6 => “Temp mappen saknas.”);

    $lang['upload_error_sizelimit'] = “Filen är större än den maximalt tillåtna filstorleken.”;
    $lang['upload_error_fileexist'] = “Finns redan i mappen.”;
    $lang['upload_error_nocopy'] = “Kunde inte kopiera in filen i mappen.”;
    $lang['upload_error_sid'] = “Kan ej hitta filen.”;
    $lang['upload_error_badext'] = “Filändelsen är inte tillåten!”;
    $lang['make_error_exist'] = “Mappen finns redan!”;
    $lang['make_error_cant'] = “Kan inte skapa ny mapp.”;
    $lang['make_error_maxdepth']= “Du kan inte skapa en ny mapp i detta katalogdjupet..”;
    ?>

40. Edwin Bush 20 February, 09 @ 7:39 pm

    I would like to see a download option for folders, where it would zip up the folder and then download it. Other than that, it looks fantastic.

41. Nick Brown 03 March, 09 @ 6:21 pm

    Just thought I’d share this in case it helps anyone else. I have a shared web server hosted solution. In my .htaccess I had to add the following directives:

    Options +FollowSymLinks
    RewriteBase /w2box/

    (where “w2box” is the name of the directory that is my storage repository – a subfolder of my web root)

    Without these I got the infamous 404 error when accessing folders.

42. dre 11 March, 09 @ 3:02 am

    Thanks Nick Brown. Got the folder working without an error by adding RewriteBase /w2box/ in the .htaccess.

43. k feighan 11 March, 09 @ 5:43 pm

    Your script is awesome!

    I got the password protection and the upload portions of the script to work perfectly but I can’t seem to get the folders not to come up with a 404. I understand the reasoning behind but I’m not to familiar with how to modify the .htaccess to allow the folders to be viewed and I can’t seem to find any examples of the .htaccess code. What would a rewrite line look like if my upload folder is titled data?

44. k feighan 11 March, 09 @ 7:00 pm

    nevermind — got it working finally. thanks Clem for a really great script!

45. Azn 12 March, 09 @ 3:51 pm

    I got everything working just the progress bar which I need the most. Tried to do as suggested “How to enable the upload progress bar ?” but it seemed not to work.

    Any other ideas?

46. Spence 13 March, 09 @ 4:50 am

    Any way to do multiple file uploads?
    Thanks for a great script

47. joseph chrzempiec 17 March, 09 @ 11:04 pm

    ok i have a Question i download it just to try it ok i got it to work……i make a directory. folder comes up when i click on the folder it gose to page can not be displayed? in the demoi tryed in on thispage i made a directory and go into the folder and it comes up. and i upload into thefolder. how come when i do make a directory in my hosting and click on that folder it gose to a page cant not be displayed what am i doing wrong?? cna someone tell me i have yahoo messenger its jchrzempiec and my email is joseph.c@internetstreets.com where the uploader is http://www.internetstreets.com/up8 can someone help please thanx you.

48. joseph c. 20 March, 09 @ 9:35 am

    my question is i got the scripts uploaded but when they go to make a directory folder that works….. butthe problem is when clicking on the folder to uploads stuff it gives me a error of 404 page can not be deisplayed can someone tell me why that is im pretty sure i did everything to work right but can not see it.can someone help pleae??????? this is a great script…. one otherthing i put in the config to accpect mp3 that works but after it up0loads it shows in the main index page but no icon next to it…. like a music icon or something how can i add something to it??

49. clem 01 April, 09 @ 2:19 pm

    It seems that most error get resolved… I do not do much support at the moment.

50. fredde 17 April, 09 @ 4:38 pm

    Is it possible to post larger files then 500mb?
    i have set in php.ini max size and post size to 1000 but it still shows 500mb in w2box, ideas?

    /F

51. acerimmer 29 April, 09 @ 5:20 am

    Anyone know why, when I have intergrated this into a page to test, it works with IE but not with firefox??

52. jonathan 03 May, 09 @ 6:52 pm

    Great script, though I am having trouble changing the ['allowed_ext'] = array as I want to allow my users to upload any file extention without having to write in all the extentions I know.

    Does anyone know how to do this?

53. Morgan Daly 17 May, 09 @ 12:28 pm

    Hello,

    I would like to enable the script to hide all the uploaded files from non-admin people not just just the delete function. Can anyone help me do this? The script used to function this way from memory.

54. Jorge 29 May, 09 @ 9:25 am

    Exists any installation file, I don´t have experience. Thank you

55. Jarrod 29 May, 09 @ 4:51 pm

    When I’m creating a new directory, it creates the directory in the right place, but the link to the directory goes to the root folder, where it isn’t.

    So if I make a folder named “test”, it will be created in “example.com/data/test”, but the link will go to “example.com/test”, where there isn’t a folder. I don’t get what’s going wrong here. Any help would be appreciated.

56. ed 01 June, 09 @ 10:13 pm

    I keep getting this when i try to upload a file larger then 2gb:
    “http negative content length detected” and the upload basically stops. In the tmp dir it creates ####_flength file but the ####_postdata gets created but doesn’t grow in size(0kb)

    any ideas? i’ve changed the settings in the php.ini file to 10GB for POST and UPLOAD. i’ve changed the $HIGH_MAX_UPLOAD setting in upload.cgi.

    Note sure what else is the issue.

    Thanks,

    ed

57. Mike Lechmann 10 June, 09 @ 6:10 pm

    @Clem: Very nice Clem. Thank you for writing it. I searched for hours for a simple upload script, *that allows directory creation* before I stumbled upon your script. Just what I needed.

    @David Cog: did you resolve your problem? I have the same issue. Creating new directories works for all directories except “images.” That always produces a blank page. It could have something to do with embedding w2box within another app? (I have it inside a wiki to make image uploading easier.) Or possibly that I use a 3rd level domain name, i.e. wiki.domain.com/w2box. Does the same situation apply for you? If I figure it out I will post back here.

58. Mike Lechmann 10 June, 09 @ 6:14 pm

    Oh whoops nevermind. The same error happens at the demo for this script. Try to access the “images” folder here:

    http://clement.beffa.org/labs/apps/w2box-demo/

    to see what I mean.

59. Mike Lechmann 10 June, 09 @ 6:22 pm

    OK very simple fix to this problem. I simply renamed the images folder w2boximages.

    And then did a search-and-replace on all calls to “images” and replace with “w2boximages.” Very easy:

    6 occurrances in index.php
    2 occurrances in sortable.jp
    3 occurrances in w2box.css

60. Kelly Brown 13 June, 09 @ 3:13 am

    The best information i have found exactly here. Keep going Thank you

61. KattyBlackyard 15 June, 09 @ 8:48 am

    The article is ver good. Write please more

62. GarykPatton 16 June, 09 @ 9:57 am

    Hi! I like your srticle and I would like very much to read some more information on this issue. Will you post some more?

63. mrheat 24 June, 09 @ 4:34 pm

    hi

    im using your script it works perfectly, but i have a question.

    when im sending a link, via email or whatever, and the file doesnt exist,
    the script enters the parent directory automatically. i dont want that.
    it should display an error file not found or 404.

    how can i make that?

    regards

64. tim 28 June, 09 @ 7:58 pm

    To allow all file extensions, change allowed_ext to:

    $config['allowed_ext'] = array(”*”);

    Comment out the following lines in index.php:

    // if (!in_array(strtolower(extname($filename)),
    //$config['allowed_ext'])) {
    // $errormsg = $lang['upload_badext'];
    // return;
    // }

    And finally, comment some of the following lines (as below) in w2box.js:

    // if (ALLOWED_TYPES.indexOf(ext) == -1) {
    // document.getElementById(”allowed”).className =’red’;
    // document.getElementById(”upload”).disabled = true;
    // } else {
    document.getElementById(”allowed”).className =”;
    document.getElementById(”upload”).disabled = false;
    // }

Leave Your Own Comment

You can follow any responses to this entry via its RSS comments feed. You can also leave a trackback if the inclination is there.