It took 72 hours of marathon coding to be done. A potential vulnerability which allowed access to upper folders via ../ has been resolved. It would have compromised my hosting files, so I have disabled all paths with ../. The File type customization is now working and currently I am looking for cool file type icons. Another thing I am thinking of is to read the icons embedded in files such as EXEs.

open_basedir string

Limit the files that can be opened by PHP to the specified directory-tree, including the file itself. This directive is NOT affected by whether Safe Mode is turned On or Off.

When a script tries to open a file with, for example, fopen() or gzopen(), the location of the file is checked. When the file is outside the specified directory-tree, PHP will refuse to open it. All symbolic links are resolved, so it's not possible to avoid this restriction with a symlink. If the file doesn't exist then the symlink couldn't be resolved and the filename is compared to (a resolved) open_basedir.

The special value . indicates that the working directory of the script will be used as the base-directory. This is, however, a little dangerous as the working directory of the script can easily be changed with chdir().

In httpd.conf, open_basedir can be turned off (e.g. for some virtual hosts) the same way as any other configuration directive with "php_admin_value open_basedir none".

Under Windows, separate the directories with a semicolon. On all other systems, separate the directories with a colon. As an Apache module, open_basedir paths from parent directories are now automatically inherited.

The restriction specified with open_basedir is actually a prefix, not a directory name. This means that "open_basedir = /dir/incl" also allows access to "/dir/include" and "/dir/incls" if they exist. When you want to restrict access to only the specified directory, end with a slash. For example: "open_basedir = /dir/incl/"

Note: Support for multiple directories was added in 3.0.7.

The default is to allow all files to be opened.

I wanted to create a directory where I could keep my files while on the move. The main problem was the poor interface associated with a simple Web Application. Fear not, AJAX is here and this is what I have come up with:-



Here goes the link to the script: http://maxotek.net/scripts/php-ajax/winExplorerImpersonator/

*** List of explorer currently supported features:-

Directory Navigation via Double Click
Directory Navigation via the Address Bar
Breadcrumb type Back/Next Navigation
General Navigation: Go Up, Refresh, Home
Scrollable + Sortable File/Folder Listing with details (Size, Type, Date Modified)
File Type Detection with Custom Icon & Description
Context Sensitive File & Folder Tasks which includes:-

General

Make a new Folder
Upload Files
File

Download
Rename
Move
Copy
Delete
Folder

Rename
Move
Copy
Delete
File/Folder Selection through Lasso and Mouse Click (Ctrl, Shift Supported)
Status Bar which shows the current objects, total file size in the directory and the zone.
File type customization

*** The List will be kept updated.

A lot of effort has gone in to make it resemble Windows Explorer both in terms of look and functionality. Although, at times, certain variations had to be made. I will be eagerly waiting for the expert opionion and ideas which made the previous scripts a success.

Thanx,

Max.