tsawler / laravel-filemanager

68 stars 25 forks source link

Problems with security #58

Open butoibogdan opened 8 years ago

butoibogdan commented 8 years ago

Hello, I have laravel 5.2 I instaled laravel filemanager but I have a problems with a middleware routes. I use for auth the standard route::auth from 5.2 with a middleware group „web“. I defined in lfm config web middleware but nothing it happens. I can acces the file manager if I am logout. Please can you give me some ideeas how can I secure the lfm routes in laravel 5.2. In your example from readme.md you have an example from laravel 4.2 wich is not available in 5.2 Thanks a lot

AmrAlfoly commented 8 years ago

here is how i solved it :

Route::group(['prefix' => 'admin', 'middleware' => 'auth'], function () {
Route::get('/laravel-filemanager', '\Tsawler\Laravelfilemanager\controllers\LfmController@show');
Route::post('/laravel-filemanager/upload', \Tsawler\Laravelfilemanager\controllers\UploadController@upload');
    });

i just added these 2 routes inside my admin routes if this worked for you please check my other 2 open issues maybe we can help each other

rebootcode commented 8 years ago

While, I am using, I am always redirected to "public" folder.

butoibogdan commented 8 years ago

This method is not working with group of middleware like 'middeware'=>['web'] or 'middleware=>['web','auth] I move al routes from vendor into my routes and all controller to my controller and it-s work fine. Because i don't know how i define my own routes. Thank a lot

rebootcode commented 8 years ago

Problem solved when using "array('web', 'auth') " as middleware value in elfinder.php file of config. :+1: