tinyfilemanager icon indicating copy to clipboard operation
tinyfilemanager copied to clipboard

application file disappear from server after a couple of minutes

Open dagon84 opened this issue 4 years ago • 31 comments

Issue:

  • I upload the file Tinyfilmanager.php via FTP in a subfolder, file permission 644, folder permission 755
  • I can browse for a couple of minutes in the interface
  • After a while I get error 404
  • I'm going to check the folder where i uploaded the file, and the file Tinyfilmanager.php is missing, as never uploaded.

is the only file that diasappear, i don't understand why.

Error log report the following

Use of undefined constant FM_EXCLUDE_ITEMS - assumed 'FM_EXCLUDE_ITEMS' in /home/clsprplv/public_html/ipcam/tinyfilemanager.php on line 2248 [31-Dec-2019 20:03:54 Etc/UTC] PHP Warning: in_array() expects parameter 2 to be array, string given in /path/tinyfilemanager.php on line 2248

But I can't understand how to solve the error.

Am I missing some setting? Any help would be appreciated.

I have tried to copy the code ina previous php file, that disappear after a while

dagon84 avatar Dec 31 '19 20:12 dagon84

Hello I have the same problem. A Tinyfilmanager.php file contents disappear from server. (the file Tinyfilmanager.php is empty after the first call)

decioviegas avatar Jan 03 '20 10:01 decioviegas

@decioviegas and @dagon84 , could you please check error logs and security logs, if you found something related to tinyfilemanager, plz share the logs, really it helps to find the root cause.

prasathmani avatar Jan 03 '20 11:01 prasathmani

I have not error log. Just open the login page and the file (Tinyfilmanager.php) will be empty print

decioviegas avatar Jan 03 '20 11:01 decioviegas

The Immunify360 has detected "Original (infected) file will be removed" Reason: SMW-SA-05072-mlw-4 Status: Content removed.

decioviegas avatar Jan 03 '20 13:01 decioviegas

I am having the same issue. After log in, the contents of tinyfilemanager.php disappeared. Anyone know any workaround?

It's because of Immunify360. Reason: SMW-SA-05072-php.tool.filemanager-6

Temporary fixed by adding tinyfilemanager.php as an exclusion in immunify360

k4mrul avatar Nov 25 '20 05:11 k4mrul

in https://github.com/prasathmani/tinyfilemanager/issues/461 you can see more details.

skerbis avatar Nov 30 '20 10:11 skerbis

I have the same problem. Did anyone get any solution? My server deletes the file and there is no log on it.

alisson-juns avatar Jan 23 '21 23:01 alisson-juns

@prasathmani anyone solved this issue?

asrafulattare avatar Feb 03 '21 11:02 asrafulattare

@attare026 whitelist the script in your ImunifyAV

skerbis avatar Feb 03 '21 12:02 skerbis

I had to contact the technical support of my hosting to create an exception on the server so that the file was not deleted.

alisson-juns avatar Feb 06 '21 14:02 alisson-juns

whitelist the script in your ImunifyAV

can explain it how can I do? thanks

asrafulattare avatar Feb 06 '21 16:02 asrafulattare

same, the provider locked the entire site, maybe you should mention that in the README, its kind of a big deal!!

ueen avatar Feb 19 '21 19:02 ueen

removed PHP decoded code in the new version, hope it resolves the issue

prasathmani avatar Feb 24 '21 08:02 prasathmani

isuue is not resolved yet in last version:

reason of delete: SMW-SA-05072-php.tool.filemanager-7

Screenshot_583

saeed74 avatar Aug 21 '21 13:08 saeed74

same issue SMW-SA-05072-php.tool.filemanager-7

dampelz avatar Sep 17 '21 14:09 dampelz

has anyone solved this issue?

Hieung28 avatar Dec 07 '21 07:12 Hieung28

this bug is still present in version tiny file manager 2.4.7

saeed74 avatar Jul 03 '22 06:07 saeed74

Screenshot_43

saeed74 avatar Jul 06 '22 14:07 saeed74

Solution for cPanel firewall:

Open tinyfilemanager.php in a text editor And

Replace All: fm_redirect(FM_SELF_URL . '?p=' . urlencode(FM_PATH)); With: $FM_PATH=FM_PATH; fm_redirect(FM_SELF_URL . '?p=' . urlencode($FM_PATH));

FransW5 avatar Jul 21 '22 06:07 FransW5

Hello...

the script was working fine on bluehost & hostinger hosting services, but after deploying the security feature the file was detected as malicious file & got deleted ⁉

i am very sad because this is the best file manager scripts that you can find so far... is there any progress on solving this issue ⁉

Regards,

YsrMe avatar Aug 31 '22 09:08 YsrMe

I get the same issue "SMW-SA-05072-php.tool.filemanager-2".

File contents gets wiped after upload.

I've tried @FransW5's suggestion but that didn't work for me unfortunately.

robsd avatar Oct 05 '22 23:10 robsd

@robsd

I tested on (cPanel 106.0.8 + cPGuard + imunify360 Malware scanner) and with the following replacement, solves the problem.

What hosting management system are you using? What antivirus and firewall is running on your host?

Replace All:
fm_redirect(FM_SELF_URL . '?p=' . urlencode(FM_PATH));

With:
$FM_PATH=FM_PATH; fm_redirect(FM_SELF_URL . '?p=' . urlencode($FM_PATH));

FransW5 avatar Oct 17 '22 18:10 FransW5

This issue is addressed in the new release.

prasathmani avatar Nov 19 '22 20:11 prasathmani

Hello...

Still the same issue on hostinger.com it sees it as (Malicious) file!

image

YsrMe avatar Nov 25 '22 07:11 YsrMe

yes They are deleting instantly now. This single page file manager is awesome but can't run on Hostinger. Really need to do something quickly.

Salkalkhan avatar Nov 25 '22 12:11 Salkalkhan

I am happy to fit it, but need more information what line or part of code is causing the problem.

prasathmani avatar Nov 26 '22 06:11 prasathmani

I don't know which line is causing this problem as I have done many changes in Version 2.4.4 and It is working for me. Yesterday I updated the page and it disappear after few minutes. I re upload but again disappear. It was malware scanner from hostinger.com who keep deleting that file. Gave me sometime, Tomorrow I will download previous commits and Upload it One by one.

Salkalkhan avatar Nov 26 '22 08:11 Salkalkhan

Winter Release 22 Latest version = 2.5.0 8de16a4 deleting Line number 3085-3087 solves the deleting problem.

if(is_array($contentType)) {
        $contentType = implode(' ', $contentType);
    }

Delete this above code.

Salkalkhan avatar Nov 26 '22 10:11 Salkalkhan

Hello @Salkalkhan

I did what you suggested & it is still the same issue as you can see below :(

image

YsrMe avatar Nov 27 '22 08:11 YsrMe

Hi, I don't know why it didn't got deleted within an hour but when Today I logged in my server it was deleted. I have left with only those files which were released before Feb 14 2022. I am still working to find the exact code which is causing this issue. Problem is they are not deleting instantly. After making any changes have to wait for them to delete that file.

My suggestion will be to go to commit and download any version which was uploaded before feb 14 this year and work till any solution is released.

Salkalkhan avatar Nov 27 '22 09:11 Salkalkhan