oqtane / oqtane.framework

CMS & Application Framework for Blazor & .NET MAUI
http://www.oqtane.org
MIT License
1.79k stars 526 forks source link

[ENH] Upload a zip file of assets and Oqtane to add them to the filemanager #4207

Open leigh-pointer opened 2 months ago

leigh-pointer commented 2 months ago

Oqtane Info

Version - 5.1.1 Render Mode - Static Interactivity - Server Database - SQL Server

Describe the enhancement

Would be nice to be able to upload a zip file of assests and Oqtuane to add them to the filemanager. The path inside the zip file would dictate the folder stucture on the server.

Anything else?

sbwalker commented 2 months ago

I am guessing any new folders created would inherit the security permissions of the folder where the ZIP file was uploaded? ZIP file uploads are famous for security vulnerabilities (ie. https://security.snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-2385941) so this enhancement would need a lot of testing.

leigh-pointer commented 2 months ago

Picking the permission from the file manager sounds right also the extensions would need to be checked which should help reduce the vulnerability.

leigh-pointer commented 1 month ago

The proposed enhancement involves extending the existing capabilities of Oqtane, a modular application framework for building web applications, by adding support for FTP file transfers and syncing assets with the database. This feature aims to streamline the process of migrating sites and frameworks by handling large amounts of assets more efficiently.

FTP Integration for Asset Management:

  1. Feature: Enable FTP transfers directly within Oqtane, allowing users to upload files to specific server locations.
  2. Advantage: Simplifies the process of moving large amounts of assets, as users can transfer files via FTP rather than manually uploading through the web interface.

Zip File Upload and Extraction:

  1. Feature: Allow users to upload a zip file containing assets to Oqtane.

Functionality:

Synchronization with File Manager and Database:

  1. Feature: Integrate a synchronization framework that updates the Oqtane file manager and the SQL Server database with new assets. Functionality:
    • Automatically add extracted files to the file manager.
    • Update the database with information about the new assets, ensuring they are readily available for use within the application.

Benefits:

By implementing this enhancement, Oqtane will offer a more robust and user-friendly asset management solution, greatly benefiting developers and site administrators involved in large-scale migrations or frequent asset updates.