prasathmani / tinyfilemanager

Single-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager
https://tinyfilemanager.github.io
GNU General Public License v3.0
4.87k stars 1.66k forks source link

Uploads fail if the directory contains an ampersand in the directory name #1154

Open cashmol opened 6 months ago

cashmol commented 6 months ago

I had a user uploading a file who got a permission error each time they tried to upload

They have the correct permissions and the file permissions on the server were also correct.

I discovered that if I removed the Ampersand from the directory name the user could upload the file.

Tested on version: Tiny File Manager 2.5.3

Steps:

Create a new folder called

Here & There

Try to upload a file and recieve the error:

image

Go up to the parent directory

Rename the directory to:

Here and There

Try to upload the file

The upload succeeds.