search

jsooter / RichFilemanager-Python3Flask

Python3 & Flask connector for Rich Filemanager
16 stars 10 forks source link

fixed rename and move, also do simple security checking on path #6

Closed alanswx closed 6 years ago

alanswx commented 6 years ago

I changed and tested move and rename. They didn't seem to work on folders before.

I also put in a check before each file call to see if the directory was within the base path. This should make it a bit more secure. Otherwise I could rename a file anywhere on my filesystem, and I could also read any directory.

NEEDS: better errors. The php version has nice error reporting, which pops up a nice dialog.