sc0ttkclark
Member
Posted 1 year ago #
My company has been working on modifying this plugin to work correctly. It has remained as a basic hacked plugin as it wasn't entirely self-contained separate from the wordpress installation. We've modified the code to work properly via /wp-content/plugins/ like it should have originally been. We are also working on a possible configuration page that will store the configuration values in the wordpress database itself. Stay tuned for more details as we complete the modifications to manage the configuration values.
http://wordpress.org/extend/plugins/wp-filemanager/
sc0ttkclark
Member
Posted 1 year ago #
We have just secured the plugin. The vulnerability corresponding to http://www.securityfocus.com/bid/27151 has now been fixed.
tvleavitt
Member
Posted 1 year ago #
Where is the security fix? When is the updated code going to be released?
tvleavitt
Member
Posted 1 year ago #
Is there a way this can be modified so that file manipulation permissions can be set by user, and not be global for every WP user in a multi-user blog with different levels of privilege?