You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Please check the following instructions before submitting a bug :
2
+
* Make sure you are using the latest version.
3
+
* If you are new to this package, make sure you followed every step from [installation document](http://unisharp.github.io/laravel-filemanager/installation).
4
+
* If you have problem applying this package, please check the [integration document](http://unisharp.github.io/laravel-filemanager/integration).
5
+
* If anything went broken after you upgraded, please check the [upgrade document](http://unisharp.github.io/laravel-filemanager/upgrade).
6
+
7
+
If your problem still remains, please do these steps :
8
+
* run `php ./vendor/unisharp/laravel-filemanager/bin/debug` and paste the results here.
9
+
* (optional) If there are errors in browser console, click on the links and you should see some PHP exceptions. Please capture screenshots and paste them here.
* Please follow the intructions in [upgrade document](https://unisharp.github.io/laravel-filemanager/upgrade).
16
17
* Important changes :
17
18
* All code refactored.
18
19
* Fix Windows compatibility.
19
20
* Fix file cannot be uploaded to "File Mode".
20
21
* Config file is also refactored, see [config document](https://unisharp.github.io/laravel-filemanager/config).
21
-
* Please follow the intructions in [this document](https://unisharp.github.io/laravel-filemanager/upgrade) to upgrade.
22
-
22
+
23
+
## Security
24
+
25
+
It is important to note that if you use your own routes **you must protect your routes to Laravel-Filemanager in order to prevent unauthorized uploads to your server**. Fortunately, Laravel makes this very easy.
26
+
27
+
If, for example, you want to ensure that only logged in users have the ability to access the Laravel-Filemanager, simply wrap the routes in a group, perhaps like this:
28
+
29
+
```php
30
+
Route::group(array('before' => 'auth'), function ()
This approach ensures that only authenticated users have access to the Laravel-Filemanager. If you are using Middleware or some other approach to enforce security, modify as needed.
39
+
40
+
**If you use the laravel-filemanager default route, make sure the `auth` middleware (set in config/lfm.php) is enabled and functional**.
0 commit comments