tinyfilemanager
tinyfilemanager copied to clipboard
Recursively Create Directories Failed or Not Supported
To reproduce Tiny File Manager 2.6
Create New Item
Item Type - Folder
Item Name - /sftpgo/sftpgodata
Folder sftpgosftpgodata is created
In the code, there is a cleaning step for the folder name before creation:
$new = str_replace('/', '', fm_clean_path(strip_tags($_POST['newfilename'])));
This line removes all slashes (/) from the folder name. As a result, the input /sftpgo/sftpgodata becomes sftpgosftpgodata.
The question is whether this behavior is intentional for security reasons, or if nested folder creation should be permitted.