Redesign login screen, Removed remember me checkbox, Security vulnerability fix #270, User role have Preview and Search option #265, #222

* Fix the RCE vuln via Upload from URL

This commit attemps to fix the Remote Code Execution
(authenticated) via Upload from URL. Some notes about
the proposed solution:

* A new function (fm_is_file_allowed) has been created to
validate if the filename is allowed. This function gets the
the filename as parameter and returns true if it validates
as allowed. Otherwise returns false (the default).

* It's better to have such validatation(s) in one place
instead of spread all over the code. There are other places in
the application where the filename is validated and they should
all be refactored to call this function. Then we can focus
all needed validations in one place only!

NOTE: This refactoring was not done - the only goal was to fix
this security vulnerability only.

* The fm_is_file_allowed() function validates the filename
based on its extension only. No other validatation(s) have been
implemented in this commit.

* File extensions are assumed to be case-insensitive.
For example, php == PHP == Php == PhP, etc. This is consitent
with some web servers. Without this, the user will have to populate
the $allowed_extensions with all possible allowed combinations.

* Although, there is one drawback to the current solution, which
is that all files must have an extension to be uploaded. This is not
consitent with modern filesystems. Maybe a better solution would be
to automatically append an extension to the filename if no
extension has been found (e.g., .html or .txt which are generally
considered to be harmless). This must be decided by the
application's maintainers.

* Fix the RCE vulns via new/rename file

Sanitize the arguments to stat using escapeshellarg()

Co-authored-by: Jorge Morgado <jorge@morgado.ch>

.github/FUNDING.yml

@@ -0,0 +1,6 @@
+# These are supported funding model platforms
+
+patreon: ccpprogrammers
+open_collective: # Replace with a single Open Collective username
+ko_fi: tinyfilemanager
+custom: ['https://paypal.me/prasathmani']

README.md

@@ -6,7 +6,7 @@
 [![GitHub Release](https://img.shields.io/github/release/qubyte/rubidium.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/releases)
  [![GitHub License](https://img.shields.io/github/license/prasathmani/tinyfilemanager.svg?style=flat-square)](https://github.com/prasathmani/tinyfilemanager/blob/master/LICENSE) 
 [![Paypal](https://img.shields.io/badge/Donate-Paypal-lightgrey.svg?style=flat-square)](https://www.paypal.me/prasathmani)
-> It is a simple, fast and small file manager with single php file. It is also a web code editor. It'll run either online or locally, on Linux, Windows or Mac based platforms. The only requirement is to have **PHP 5.5+** available.
+> It is web based file manager and it is a simple, fast and small file manager with a single file, multi-language ready web application for storing, editing and managing files and folders online via web browser. The Application runs on PHP 5.5+, a build-in support for managing text files with cloud9 IDE and it supports syntax highlighting for over 150+ languages and over 35+ themes. .
 
 ## Demo
 [Demo](https://tinyfilemanager.github.io/demo/)

SECURITY.md

@@ -0,0 +1,27 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The team takes security bugs seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
+
+To report a security issue, email [ccpprogrammers@gmail.com](mailto:ccpprogrammers@gmail.com) and include the word "SECURITY" in the subject line.
+
+The team will send a response indicating the next steps in handling your report. After the initial reply to your report you will be kept informed of the progress towards a fix and full announcement.
+
+Report security bugs in third-party modules to the person or team maintaining the module.
+
+## Disclosure Policy
+
+When the security team receives a security bug report, they will assign it to a
+primary handler. This person will coordinate the fix and release process,
+involving the following steps:
+
+  * Confirm the problem and determine the affected versions.
+  * Audit code to find any potential similar problems.
+  * Prepare fixes for all releases still under maintenance. These fixes will be
+    released as fast as possible to npm.
+
+## Comments on this Policy
+
+If you have suggestions on how this process could be improved please submit a
+pull request.

translation.json

@@ -2,6 +2,80 @@
   "appName": "Tiny File Manager",
   "version": "2.3.8",
   "language": [
+    {
+      "name": "فارسی",
+      "code": "Fa",
+      "translation": {
+        "Tiny File Manager": "مدیریت فایل کوچک",
+        "File Manager": "مدیریت فایل",
+        "Sign in": "ورود",
+        "Username": "نام کاربری",
+        "Password": "گذرواژه",
+        "Sign Out": "خروج",
+        "Move": "جابجایی",
+        "Copy": "کپی",
+        "Save": "ذخیره",
+        "Select all": "انتخاب همه",
+        "Unselect all": "انتخاب نکردن همه",
+        "File": "فایل",
+        "Back": "برگشت",
+        "Size": "حجم",
+        "Perms": "دسترسی",
+        "Modified": "ویرایش شده",
+        "Owner": "مالک",
+        "Search": "جستجو",
+        "New Item": "افزودن",
+        "Folder": "پوشه",
+        "Delete": "حذف",
+        "Rename": "تغییر نام",
+        "Copy to": "کپی در",
+        "Direct link": "لینک مستقیم",
+        "Upload Files": "اپلود فایل ها",
+        "Change Permissions": "تغییر دسترسی",
+        "Copying": "کپی کردن",
+        "Create New Item": "افزودن",
+        "Name": "نام",
+        "Advanced Editor": "ویرایشگر پیشرفته",
+        "Remember Me": "مرا به خاطر داشته باشe",
+        "Actions": "اکشن",
+        "Upload": "آپلود",
+        "Cancel": "انصراف",
+        "Invert Selection": "معکوس کردن انتخاب ها",
+        "Destination Folder": "پوشه مقصد",
+        "Item Type": "نوع مورد",
+        "Item Name": "نام مورد",
+        "Create Now": "ایجاد در الان",
+        "Download": "دانلود",
+        "Open": "باز کردن",
+        "UnZip": "UnZip",
+        "UnZip to folder": "خارج کردن از حالت فشرده",
+        "Edit": "ویرایش",
+        "Normal Editor": "ویرایش معمولی",
+        "Back Up": "برگشت بالا",
+        "Source Folder": "منبه پوشه",
+        "Files": "فایل ها",
+        "Change": "تغییر",
+        "Settings": "تنظیمات",
+        "Language": "زبان",
+        "Memory used": "حافظه استفاده شده",
+        "Partition size": "حجم پارتیشن",
+        "Error Reporting": "گزارش خطا",
+        "Show Hidden Files": "نمایش فایل های مخفی",
+        "Full size": "فضا پر است",
+        "Help": "راهنما",
+        "Free of": "خالیی از",
+        "Preview": "پیشنمایش",
+        "Help Documents": "مستندات کمکی",
+        "Report Issue": "گزارش مشکل",
+        "Generate": "ایجاد",
+        "Full Size": "تمام حجم",
+        "free of": "خالی از",
+        "Calculate folder size": "محاسبه حجم پوشه",
+        "Check Latest Version": "بررسی آخرین نسخه",
+        "Generate new password hash": "ایجاد گذرواژه جدید",
+        "Hide Perms/Owner columns": "مخفی کردن ستون های دسترسی و مالک"
+      }
+    },
     {
       "name": "русский",
       "code": "ru",
@@ -71,7 +145,6 @@
         "Username": "Username",
         "Password": "Password",
         "Logout": "Disconnettiti",
-        "Move": "Sposta",
         "Copy": "Copia",
         "Save": "Salva",
         "SelectAll": "Seleziona tutto",
@@ -113,14 +186,14 @@
         "BackUp": "Back-Up",
         "SourceFolder": "Cartella di Origine",
         "Files": "File",
-	"Move": "Sposta",
+        "Move": "Sposta",
         "Change": "Cambia",
         "Settings": "Impostazioni",
         "Language": "Lingua",
         "MemoryUsed": "Memoria utilizzata",
         "PartitionSize": "Dimensione della partizione",
-	"ErrorReporting": "Segnala errori",
+        "ErrorReporting": "Segnala errori",
-	"ShowHiddenFiles": "Mostra file nascosti"
+        "ShowHiddenFiles": "Mostra file nascosti"
       }
     },
     {
@@ -239,64 +312,64 @@
         "Language": "Lenguaje"
       }
     },
-	{
+    {
-		"name": "Català",
+      "name": "Català",
-		"code": "ca",
+      "code": "ca",
-		"translation": {
+      "translation": {
-		"AppName": "Tiny File Manager",
+        "AppName": "Tiny File Manager",
-		"AppTitle": "Administrador d'Arxius",
+        "AppTitle": "Administrador d'Arxius",
-		"Login": "Iniciar Sessió",
+        "Login": "Iniciar Sessió",
-		"Username": "Nom d'Usuari",
+        "Username": "Nom d'Usuari",
-		"Password": "Contrasenya",
+        "Password": "Contrasenya",
-		"Logout": "Desconnectar-se",
+        "Logout": "Desconnectar-se",
-		"Move": "Moure",
+        "Move": "Moure",
-		"Copy": "Copiar",
+        "Copy": "Copiar",
-		"Save": "Desar",
+        "Save": "Desar",
-		"SelectAll": "Seleccionar Tot",
+        "SelectAll": "Seleccionar Tot",
-		"UnSelectAll": "Deseleccionar Tot",
+        "UnSelectAll": "Deseleccionar Tot",
-		"File": "Arxiu",
+        "File": "Arxiu",
-		"Back": "Enrere",
+        "Back": "Enrere",
-		"Size": "Mida",
+        "Size": "Mida",
-		"Perms": "Permisos",
+        "Perms": "Permisos",
-		"Modified": "Modificat",
+        "Modified": "Modificat",
-		"Owner": "Propietari",
+        "Owner": "Propietari",
-		"Search": "Cercar",
+        "Search": "Cercar",
-		"NewItem": "Nou Ítem",
+        "NewItem": "Nou Ítem",
-		"Folder": "Carpeta",
+        "Folder": "Carpeta",
-		"Delete": "Esborrar",
+        "Delete": "Esborrar",
-		"Rename": "Canviar Nom",
+        "Rename": "Canviar Nom",
-		"CopyTo": "Copiar a",
+        "CopyTo": "Copiar a",
-		"DirectLink": "Enllaç Directe",
+        "DirectLink": "Enllaç Directe",
-		"UploadingFiles": "Pujar Arxius",
+        "UploadingFiles": "Pujar Arxius",
-		"ChangePermissions": "Canviar Permisos",
+        "ChangePermissions": "Canviar Permisos",
-		"Copying": "Copiant",
+        "Copying": "Copiant",
-		"CreateNewItem": "Crear un Nou Ítem",
+        "CreateNewItem": "Crear un Nou Ítem",
-		"Name": "Nom",
+        "Name": "Nom",
-		"AdvancedEditor": "Editor Avançat",
+        "AdvancedEditor": "Editor Avançat",
-		"RememberMe": "Recorda'm",
+        "RememberMe": "Recorda'm",
-		"Actions": "Accions",
+        "Actions": "Accions",
-		"Upload": "Pujar",
+        "Upload": "Pujar",
-		"Cancel": "Cancel·lar",
+        "Cancel": "Cancel·lar",
-		"InvertSelection": "Invertir Selecció",
+        "InvertSelection": "Invertir Selecció",
-		"DestinationFolder": "Carpeta Destí",
+        "DestinationFolder": "Carpeta Destí",
-		"ItemType": "Tipus d'Ítem",
+        "ItemType": "Tipus d'Ítem",
-		"ItemName": "Nom de l'Ítem",
+        "ItemName": "Nom de l'Ítem",
-		"CreateNow": "Crear",
+        "CreateNow": "Crear",
-		"Download": "Descarregar",
+        "Download": "Descarregar",
-		"Open": "Obrir",
+        "Open": "Obrir",
-		"UnZip": "Descomprimir",
+        "UnZip": "Descomprimir",
-		"UnZipToFolder": "Descomprimir a Carpeta",
+        "UnZipToFolder": "Descomprimir a Carpeta",
-		"Edit": "Editar",
+        "Edit": "Editar",
-		"NormalEditor": "Editor Normal",
+        "NormalEditor": "Editor Normal",
-		"BackUp": "Còpia de Seguretat",
+        "BackUp": "Còpia de Seguretat",
-		"SourceFolder": "Carpeta Actual",
+        "SourceFolder": "Carpeta Actual",
-		"Files": "Arxius",
+        "Files": "Arxius",
-		"Change": "Canviar",
+        "Change": "Canviar",
-		"Settings": "Preferències",
+        "Settings": "Preferències",
-		"Language": "Idioma",
+        "Language": "Idioma",
-		"Preview": "Previsualitzar"
+        "Preview": "Previsualitzar"
-		}
+      }
-	},
+    },
     {
       "name": "Deutsch",
       "code": "de",
@@ -415,20 +488,20 @@
       "name": "简体中文",
       "code": "zh-CN",
       "translation": {
-        "AppName": "Tiny File Manager",
+        "AppName": "文件管理器",
-        "AppTitle": "文件及目录管理器",
+        "AppTitle": "文件管理器",
         "Login": "登录",
         "Username": "账号",
         "Password": "密码",
         "Logout": "退出",
         "Move": "移动",
-        "Copy": "拷贝",
+        "Copy": "复制",
         "Save": "保存",
         "SelectAll": "全选",
         "UnSelectAll": "取消全选",
         "File": "文件",
-        "Back": "取消上传",
+        "Back": "取消",
-        "Size": "文档大小",
+        "Size": "大小",
         "Perms": "权限",
         "Modified": "修改时间",
         "Owner": "拥有者",
@@ -445,7 +518,7 @@
         "Name": "文件名",
         "AdvancedEditor": "高级编辑器",
         "RememberMe": "记住登录信息",
-        "Actions": "可执行操作",
+        "Actions": "执行操作",
         "Upload": "上传",
         "Cancel": "取消",
         "InvertSelection": "反向选择",
@@ -453,7 +526,7 @@
         "ItemType": "文件类型",
         "ItemName": "创建名称",
         "CreateNow": "创建",
-        "Download": "下載",
+        "Download": "下载",
         "UnZip": "解压缩",
         "UnZipToFolder": "解压至目标文件夹",
         "Edit": "编辑",
@@ -462,7 +535,7 @@
         "SourceFolder": "源文件夹",
         "Files": "文件",
         "Change": "修改",
-        "Settings": "配置",
+        "Settings": "设置",
         "Language": "语言",
         "Open": "开启",
         "Group": "用户组",
@@ -474,7 +547,20 @@
         "enable": "启用",
         "disable": "禁用",
         "ErrorReporting": "上传错误报告",
-        "ShowHiddenFiles": "显示隐藏文件"
+        "ShowHiddenFiles": "显示隐藏文件",
+        "Help": "帮助",
+        "HideColumns": "隐藏权限&拥有者",
+        "CalculateFolderSize": "显示文件夹大小",
+        "FullSize": "所有文件大小",
+        "MemoryUsed": "使用内存",
+        "PartitionSize": "可用空间",
+        "FreeOf": "磁盘大小",
+        "Check Latest Version": "检查更新",
+        "Generate new password hash": "生成新的hash密码",
+        "Report Issue": "报告问题",
+        "Help Documents": "帮助文档",
+        "Generate": "生成",
+        "Preview": "预览"
       }
     },
     {
@@ -600,7 +686,7 @@
         "PartitionSize": "Ukuran partisi"
       }
     },
-	{
+    {
       "name": "Ελληνικά",
       "code": "gr",
       "translation": {
@@ -713,7 +799,30 @@
         "Files": "Arquivos",
         "Change": "Alterar",
         "Settings": "Preferências",
-        "Language": "Idioma"
+        "Language": "Idioma",
+        "Preview": "Visualizar",
+        "MemoryUsed": "Memória usada",
+        "PartitionSize": "Tamanho da partição",
+        "ErrorReporting": "Relatório de erros",
+        "ShowHiddenFiles": "Mostrar arquivos ocultos",
+        "Group": "Grupo",
+        "Other": "Outros",
+        "Read": "Ler",
+        "Write": "Escrever",
+        "Execute": "Executar",
+        "enable": "habilitar",
+        "disable": "desativar",
+        "FreeOf": "Livre de",
+        "Free Of": "Livre de",
+        "FullSize": "tamanho completo",
+        "Help": "Ajuda / Suporte",
+        "Generate": "Gerar",
+        "Report Issue": "Informar problema",
+        "Generate new password hash": "Gerar nova hash de senha",
+        "Help Documents": "Documentos de Ajuda",
+        "Check Latest Version": "Verifique a última versão",
+        "HideColumns": "Ocultar colunas Perms / Owner",
+        "CalculateFolderSize": "Calcular o tamanho da pasta"
       }
     },
     {
@@ -890,7 +999,7 @@
         "PartitionSize": "גודל מחיצה"
       }
     },
-	{
+    {
       "name": "العربية",
       "code": "Ar",
       "translation": {
@@ -911,7 +1020,7 @@
         "Perms": "صلاحيات",
         "Modified": "عدل بـ",
         "Owner": "المالك",
-        "Search":"بحث",
+        "Search": "بحث",
         "NewItem": "عنصر جديد",
         "Folder": "مجلد",
         "Delete": "حذف",
@@ -947,14 +1056,12 @@
         "Language": "لغة",
         "MemoryUsed": "الذاكرة المستخدمة",
         "PartitionSize": "حجم القسم",
-
+        "Free of": "مساحة فارغة من ",
-		"Free of": "مساحة فارغة من ",
         "Preview": "عرض",
         "Full size": "الحجم الكلي",
-		"ErrorReporting": "التبليغ باخطاء",
+        "ErrorReporting": "التبليغ باخطاء",
         "ShowHiddenFiles": "اظهار الملفات المخفية",
         "Help": "مساعدة",
-
         "Generate": "توليد",
         "Report Issue": "التبليغ بمشكلة",
         "Generate new password hash": "توليد هاش لكلمة المرور",
@@ -1026,6 +1133,80 @@
         "FullSize": "Plná velikost",
         "FreeOf": "volné z"
       }
+    },
+    {
+      "name": "Türkçe",
+      "code": "tr",
+      "translation": {
+        "Tiny File Manager": "Tiny Dosya Yöneticisi",
+        "File Manager": "Dosya Yöneticisi",
+        "Sign in": "Giriş Yap",
+        "Username": "Kullanıcı adı",
+        "Password": "Parola",
+        "Sign Out": "Çıkış Yap",
+        "Move": "Taşı",
+        "Copy": "Kopyala",
+        "Save": "Kaydet",
+        "Select all": "Hepsini Seç",
+        "Unselect all": "Hepsini Bırak",
+        "File": "Dosya",
+        "Back": "Geri",
+        "Size": "Boyut",
+        "Perms": "İzinler",
+        "Modified": "Son Düzenleme",
+        "Owner": "Sahibi",
+        "Search": "Arama",
+        "New Item": "Yeni Dosya",
+        "Folder": "Klasör",
+        "Delete": "Sil",
+        "Rename": "Yeniden Adlandır",
+        "Copy to": "Şuraya Kopyala",
+        "Direct link": "Erişim Linki",
+        "Upload Files": "Dosyaları Yükle",
+        "Change Permissions": "İzinleri Değiştir",
+        "Copying": "Kopyalanıyor",
+        "Create New Item": "Yeni Dosya Oluştur",
+        "Name": "Ad",
+        "Advanced Editor": "Gelişmiş Düzenleyici",
+        "Remember Me": "Beni Hatırla",
+        "Actions": "Hareketler",
+        "Upload": "Yükle",
+        "Cancel": "İptal Et",
+        "Invert Selection": "Seçimi Geri Al",
+        "Destination Folder": "Hedef klasör",
+        "Item Type": "Dosya Türü",
+        "Item Name": "Dosya Adı",
+        "Create Now": "Oluştur",
+        "Download": "İndir",
+        "Open": "Aç",
+        "UnZip": "Arşivden çıkart",
+        "UnZip to folder": "Klasöre Çıkart",
+        "Edit": "Düzenle",
+        "Normal Editor": "Normal Düzenleyici",
+        "Back Up": "Yedekle",
+        "Source Folder": "Kaynak Klasör",
+        "Files": "Dosyalar",
+        "Change": "Değişim",
+        "Settings": "Ayarlar",
+        "Language": "Dil",
+        "Memory used": "Kullanılan Bellek",
+        "Partition size": "Disk Boyutu",
+        "Error Reporting": "Hata Raporlama",
+        "Show Hidden Files": "Gizli Dosyaları Göster",
+        "Full size": "Toplam Boyut",
+        "Help": "Yardım",
+        "Free of": "Boş Olan",
+        "Preview": "Görüntüle",
+        "Help Documents": "Dökümanlar",
+        "Report Issue": "Sorun Bildir",
+        "Generate": "Oluştur",
+        "Full Size": "Toplam Boyut",
+        "free of": "Boş olan",
+        "Calculate folder size": "Klasör Boyutlarını Hesapla",
+        "Check Latest Version": "Güncel Sürümü Kontrol Et",
+        "Generate new password hash": "Parola için Hash Üret",
+        "Hide Perms/Owner columns": "Yetki / Sahip Sütununu Gizle"
+      }
     }
   ]
 }