A Web-Based File Browser
page 1 of 1
Published: 17 Dec 2003
Unedited - Community Contributed
Abstract
Walk directory structures, download files, restrict users to certain folders, hide files and directories.
by Peter Brunone
Feedback
Average Rating: This article has not yet been rated.
Views (Total / Last 10 Days): 25230/ 30

Now we get into the good stuff. This example uses a file streaming component to give a more full-featured experience.

    Security features include a "ceiling" to keep users within the desired directory structure, as well as a file size limit (set by a property in SA File-Up, or your preferred upload component).

Try it here.     Download it here (~8kb).

Updates:

6/28/2002: Another security hole patched
    A path check was missing from docOpen.asp, letting users climb into other folders accessible to the anonymous web user account; this has now been corrected (thanks, Gluck, for bringing this to my attention).

3/16/2002: Security hole patched
    In previous versions, users could climb above the administrator-defined "ceiling" by using the "../" switch in the URL. This is now precluded by an additional security check.

12/31/2001: v1.3 -- Filtering capability
    Keep crucial files away from prying eyes; filter by file extension with a simple delimited list. Filter by inclusion (hide specific files) or exclusion (hide all but specific files).
    Directory filtering by leading character is supported as well.

9/12/2000: The source code is here!
    Simply extract the zip file into the desired folder under your web root -- remembering to check the "Use Folder Names" option -- and change the necessary variables at the top of browser.asp. Then start browsing! Remember if you're going to use the Delete function that you should be *very* careful with the ceiling you give your users.
    Stay tuned for future enhancements...



User Comments

Title: Where is the lInk   
Name: Jeremy
Date: 2010-11-26 9:03:03 AM
Comment:
Does anyone have a working download link for this!
Title: Link dead   
Name: Robin
Date: 2010-05-07 3:20:22 AM
Comment:
Would love to download this file... - it is pefrect...
Title: WoW   
Name: GgAkillis
Date: 2010-03-04 7:26:58 PM
Comment:
Cannot download this file
Title: Mr.   
Name: M Dubb
Date: 2008-03-18 4:03:31 AM
Comment:
Can't download it?
It doesn't exist due to user error?

Where are the files?
Title: weak   
Name: red
Date: 2007-09-07 2:13:36 PM
Comment:
cannot download it
Title: Can not download   
Name: Coki
Date: 2007-04-12 8:03:46 AM
Comment:
I can not download the code!!
Title: no download for sample !!!   
Name: Bhavik Vora
Date: 2007-04-03 6:51:23 AM
Comment:
i cant dowload the file
Title: Not enough information   
Name: Peter Brunone
Date: 2007-02-19 10:53:51 PM
Comment:
Without knowing more, it's hard to say what the problem is. Have you turned of "Friendly Error Messages" in Internet Explorer so you can see the real error message?
Title: Page Can Not Be Displayed   
Name: Suree Siripat
Date: 2007-02-18 11:41:59 PM
Comment:
Hi,
I've got the same problem as the follows below.

Title: Page Can Not Be Displayed
Name: Ali Manzar Nejad
Date: 8/9/2005 4:43:47 PM

Please give us some advice on User Comments. Thank you.
My email: mrsiripat2501@yahoo.com
Title: How to textbox event using ASP   
Name: aviansh joshi
Date: 2006-04-07 1:46:37 PM
Comment:
Hi ,
how to i am handle textbox event in asp .
i want if i am click or press tab on textbox Then my ASP code is activated , how i do plz. help me
Thanx
plz. send code or advise in my mail address (avinash.joshi1@gmail.com)
Thanx
Title: problems with the code   
Name: delanvital
Date: 2006-01-19 6:12:46 AM
Comment:
Microsoft VBScript runtime error '800a000d'

Type mismatch: 'LogArticleHit'

/fb/browser.asp, line 167
Title: Page Can Not Be Displayed   
Name: Ali Manzar Nejad
Date: 2005-08-09 4:43:47 PM
Comment:
i have problem with opendoc.asp
when i click on the link of any file new window opened
but the content cannot be displayed!!!!

i try it on this page & on my web also but problem exists!!!
Title: Error with Mozilla Firefox   
Name: Thomas
Date: 2005-08-02 7:47:17 AM
Comment:
When trying to access a sub-dir with Firefox 1.04 I get the following error:

Microsoft VBScript runtime error '800a0005'

Invalid procedure call or argument: 'Left'

/peterbrunone/browserdemo/ssi/library.asp, line 25

Your demo otherwise works fine in IE.
Title: Student   
Name: Ali Afifi
Date: 2004-10-23 9:08:12 AM
Comment:
Using FileSystemObject.DeleteFile I want to Delete a File On Server...

Server reply Permission Denied

What should I do in IIS ...

I need to Delete a file What Should I do...
What Should I use...

Product Spotlight
Product Spotlight 





Community Advice: ASP | SQL | XML | Regular Expressions | Windows


©Copyright 1998-2017 ASPAlliance.com  |  Page Processed at 2017-03-29 9:20:45 AM  AspAlliance Recent Articles RSS Feed
About ASPAlliance | Newsgroups | Advertise | Authors | Email Lists | Feedback | Link To Us | Privacy | Search