uCloud – File Hosting Script – Securely Manage, Preview & Share Your Files
uCloud allows freelancers, small companies (resembling media companies) and site owners to simply share their information on-line. It’s been constructed to be extraordinarily sturdy, safe and really quick!
Features
- NEW PHP 8.3 help
- NEW LiteSpeed help (aswell as Apache & Nginx)
- NEW 2FA integration utilizing Google Authenticator
- NEW Video, audio, picture & doc embed code
- NEW Code previews & syntax highlighting
- NEW Core framework efficiency enhancements
- Upload Files:
- SFTP, FTP, Rackspace and Amazon S3 Storage.
- BackBlaze storage help.
- Use with Wasabi utilizing this guide.
- Scale your storage through the use of your individual devoted server storage (direct downloads/uploads).
- Internally shared information & folders. Share a number of information & folders with different registered customers and allow them to view, add and obtain information.
- Global sharing choice.
- Multi-file uploader with progress. 10GB+ filesize supported.
- Images previewed earlier than add. File icons proven for every file earlier than add.
- Percentage progress, measurement remaining, add pace and time remaining.
- Background importing of information. Continue to handle your account whereas information are being uploaded.
- Drag & Drop into the browser to start importing.
- Send through e mail choice as soon as uploaded.
- Copy folder url to the clipboard hyperlink.
- Built in url shortener.
- Support for a number of file servers.
- File particulars web page with the next:
- Full path to the file.
- HTML code to instantly copy into an internet site.
- Forum code to instantly copy right into a discussion board.
- Link to view statistics for the file.
- Link to take away the file.
- Links to share with frequent social media websites; Facebook, Twitter and so on.
- Link to share through e mail.
- File Manager:
- Login together with your Facebook, Twitter or Google Account (non-compulsory setting through admin).
- User registration web page.
- NEW Terms & Conditions web page.
- NEW Privacy Policy web page.
- Built utilizing ajax so your complete file supervisor is lightning quick!
- Thumbnails generated for photographs & pdf information (requires imagemagick)
- File previews for an enormous quantity of information:
- Images – jpg, jpeg, png, gif, wbmp
- Documents – doc, docx, xls, xlsx, ppt, pptx, pdf, pages, ai, tiff, dxf, svg, eps, ps, ttf, otf, xps (< 15MB)
- Videos – mp4, flv (when Flash enabled), ogg
- Audio – mp3
- Caching of picture thumbnails for quick load occasions.
- Right-click menu choices on every file & folder to shortly handle the choices.
- Powerful search widget. Quickly reveals you information and folders which match your search.
- Advanced search to search out information by add date and folder.
- Requires account to add and handle information. (admin managed)
- 2 view choices for information:
- Icon view – exhibiting file thumbnails.
- List view.
- Full display mode.
- Sort file itemizing by filename, file measurement, date uploaded, final entry and whole downloads.
- Change the quantity of information proven per web page.
- Download a complete folder as a zipper file.
- Duplicate file(s) choice.
- Rename, transfer & delete file choices.
- Watermarking of photographs by folder choice. Upload a png watermark, set the place and padding. This can then be enabled by folder. Use this to share ‘proof’ copies of photographs to clients with out giving the person full entry to the picture.
- File Downloads:
- Built in help for xSendFile & xAccelRedirect! Big enhancements on server efficiency if enabled.
- Files are saved securely in your net host. They are renamed with out the extension on add and positioned inside a folder which may’t be accessed instantly.
- Downloads are carried out utilizing a safe entry hash which expire after use. The identical obtain hyperlink can’t be used a number of occasions.
- Detailed File Statistics:
- Daily, weekly, month-to-month downloads.
- Referring websites.
- Visiting nations.
- Visiting browsers.
- Visiting working methods.
- Sharing:
- Links to share information & folders through Facebook, Twitter, LinkedIn & extra.
- If a folder is about as personal, generate a novel url to allow somebody with out an account to entry it.
- Send through e mail choice on all information & folders.
- Option to cover or present the obtain button when sharing folders.
- Option to permit or disable downloading of all information inside a shared folder.
- Security:
- 2FA help utilizing Google Authenticator.
- Account password saved utilizing SHA256 & PBKDF2 key extender.
- Set file folders and personal or public.
- Set passwords on file folders.
- IP blacklisting – block IP addresses from utilizing the positioning.
- Support for https.
- Externally examined for XSS and SQL injection assaults.
- Customisations:
- Written for PHP7.3+.
- 100% full supply code.
- Easy set up.
- Fully customisable.
- Modern template. (simply customise and create extra ones)
- Simple, clear, ajax fashion feel and appear.
- Admin Area:
- Redesigned admin space utilizing Bootstrap 3.
- Interactive bulk import software.
- Separate devoted admin space.
- Dashboard detailing downloads and lively information.
- Search information.
- Disable information.
- NEW Support for a number of languages. Automatic language translation through Google Translation API. Note: This might incur extra fees for utilizing their API.
- Manage customers and filter by person information.
- Manage blocked IPs.
- Manage web site settings.
- Set and handle file servers.
- Configure to make use of particular file server or the one with most house.
- Set template.
- Set person account settings:
- Days to maintain inactive information.
- Maximum add filesize.
- and extra.
- Option to set the filename on the obtain url.
- Modern Ajax interface.
- Via the admin space simply set the brand, further css and web site pores and skin.
- Automatic language translations through Google Translate API. Translate your complete web site content material to a different language by clicking a button. Note: Requires a Google API key. Menually edited translations will be marked as ‘locked’ in order that they’re not overwritten.
- Added choice in admin to dam the identical file from being re-uploaded. Optional on file take away and automated after elimination on abuse stories.
- Added admin “impersonate person” choice, so admin customers can login as some other person account.
- Added new admin web page for backing up the database and codebase. Functionality additionally inbuilt preparation for automated upgrades at a later date.
Admin Account/Area
You can see a demo of admin space by logging in with username: admin and password: Password@Demo, notice that damaging actions like deleting and enhancing are disabled on demo web site and admin account will probably be reset each day.
Requirements
- PHP 7.3+ together with PHP 8.0+
- Linux OS (normal on most shared hosts)
- MySQL 5+ with 1 empty database
- PHP PDO MySQL Extension
- PHP GD & FTP Extension (usually enabled as normal)
- Apache with Rewrite Module or Nginx
- A Web Browser that helps HTML5/Javascript (IE9+, FireFox, Safari, Chrome)
Change History
seventeenth April 2024 – v2.1.2 – Minor updates and fixes.
- Replaced utilization of deprecated Psr7stream_for() perform name in Backblaze storage
seventh February 2024 – v2.1.1 – Minor updates and fixes.
- Added obtain as zip choice on publicly shared folders - Fixed bug on admin language CSV import - Fixed lacking web site settings which may set off exceptions on later PHP variations Release Notes: There are database adjustments inside this launch. See /set up/assets/upgrade_sql_statements/v2.1.1.sql - Please assessment the set up documentation for steering on how one can improve.
sixteenth May 2022 – v2.1.0 – PHP 8+ help, LiteSpeed help, 2FA, syntax highlighting, efficiency enhancements & tons extra.
- PHP v8.1 help. - LiteSpeed webserver help. --- X-Litespeed-Location improved downloads choice on LiteSpeed file servers. - 2FA integration for web site login. --- New admin web site settings choice to allow the characteristic. --- User can allow/disable 2FA through account settings. --- Admin space choice to reset 2FA by person. --- User login course of up to date to immediate for 2FA, if enabled. --- Admin login has separate immediate for 2FA, if enabled. --- Social login up to date to request 2FA, if enabled. - File Previewer Plugin: --- Support for previewing textual content based mostly information. Including syntax highlighting on code resembling JS, CSS, HTML and PHP. --- Added help for ImageMagick picture file sorts - AI, PSD, Animated GIF and 100's extra. --- Added help for resized animated GIF photographs when utilizing ImageMagick. --- Added world picture watermark choice. --- Added picture embed html code choice. --- Added background picture thumbnail creator script. --- Added doc embed html code choice. --- Added choice to autoplay movies (browser help dependant). --- Added video embed html code choice. --- Added choice to autoplay audio information (browser help dependant). --- Added audio embed html code choice. --- Improvement to the doc viewer so it continues to work even when downloads are locked down by IP tackle. - Performance enhancements: --- Improved core framework load occasions by lowering database queries on every load. --- Removed IP ban for 'Whole Site' choice to enhance core load occasions. These must be managed through your net server going ahead. --- Additional database indexes based mostly on queries inside the core framework. --- Moved caching of used server cupboard space worth into cron activity, fairly than every file add. --- Improved reminiscence utilization on banned ip information purge. --- Performance enchancment to md5 hash era for giant information. - Added cancel add choice inside file supervisor. Options to cancel any pending file or your complete add. - Added further OpenGraph headers for hyperlinks shared through Facebook. - Geo-targeting for file servers. Direct visitors from nations to particular storage servers. - Upgraded core GeoIP library to make use of GeoLite2 by Maxmind. IP database up to date to the most recent. - Removed native server fallback when no storage servers out there on add. The person now sees an error message and importing is blocked. - Better error responses on failed/blocked uploads. - Added obtain rely to file supervisor file itemizing view. - Limit add pace by account bundle utilizing Nginx. You can now set an "Upload Url Slug" through the account bundle settings. When utilizing Nginx, you may configure this to be pace restricted. - Limit concurrent downloads higher in Nginx. You can now set a "Download Url Slug" through the account bundle settings. On Nginx this may be configured to restrict connections or obtain pace. - Fixed subject with zipping information when downloads are locked down by IP tackle. - Added web site settings to disable chunked uploads and the chunked add file measurement. (suggest for superior setups solely) - Added admin choice to allow concurrent uploads to enhance add efficiency. - Added admin choice to set what number of concurrent uploads to course of on the identical time. - Admin choice to purge utility cache on file servers aswell as the primary native server. - Admin space web site setting choice to disable md5 file hashing over sure file sizes. Resolves md5_file() efficiency points on low useful resource hosts. - Added purpose for file elimination on delete. For instance, admin/person eliminated, copyright declare or system expired. Shown when attempting to entry the obtain url. - Added UID to every log session to simplify reviewing log historical past. - Ensured all "direct" file servers route file urls through the primary web site url. - Fixed subject the place file preview cache information typically not being scheduled for elimination inside the file motion queue. - Added fileHash and whether or not a file is a replica on admin, edit file popup. - Added choice in file preview settings to not present the small print web page when not logged in. i.e. file urls will set off a obtain. - Improved system logging inside the add course of. - Added help for SSH keys aswell as passwords, in file server SSH connection particulars. - Updated token obtain urls for media in order that they at all times embody the filename, for third get together participant compatibility. - Added catch in core database class for "SQLSTATE[HY000]: General error: 2006 MySQL server has gone away" errors. Attempts to reconnect fairly than exiting. - Fix to video playback on Safari when not utilizing XSendFile or XAccelRedirect. - Fix to implement UTF8 character encoding on e mail sending. - Fixed subject which brought about some cache information to not be queued for deletion on 'direct' file servers. - Fixed subject with admin space delete person perform, which typically brought about uploaded information to not be eliminated. - Fixed double icon subject when file preview "Show Thumbnails" choice disabled. - Fixed subject with inaccurate HTML being output on uploader when file previewer plugin disabled. - Fixed subject with "obtain as zip" to make sure the zip file identify on the server is at all times distinctive. - Resolved subject with crypto features the place information typically fails to encrypt absolutely. - Improvements to ipv6 validation and login logs. - Ensured folderHash is about on folder creation inside the file import plugin. Release Notes: There are database adjustments inside this launch. See /set up/assets/upgrade_sql_statements/v2.1.0.sql - Please assessment the set up documentation for steering on how one can improve.
ninth February 2021 – v2.0.2 – Security repair.
- Fix to Server-Side Request Forgery on distant url obtain. Release notes: To apply the replace from v2.0.1, merely add the next information to your set up: /app/companies/Uploader.class.php /app/core/Framework.class.php
twenty seventh August 2020 – v2.0.1 – Minor fixes and enhancements.
- Added file supervisor actions buttons to cell view. - Added choice on public sharing web page to obtain all share as zip or simply the present folder. - Significant efficiency enhancements on obtain as zip characteristic. - Increased max supported filesize on the doc viewer to 50MB (from 10MB). - Better fallback dealing with if file is larger than 50MB on doc viewer. - Moved script model quantity into /app/core/Framework.class.php. - Minor repair to folder paging when no information. - Minor repair to edit file, folder dropdown not at all times itemizing all folders. - Minor enchancment to JS translation perform. - Minor repair to empty trash perform. - Captcha code output repair, because of the method Twig handles HTML they weren't at all times rendered as anticipated. - Minor repair so as to add person account kind admin perform. - Removal of varied PHP notices. - Minor repair to auto scan of any newly added themes. Previously this was not routinely exhibiting in admin. - Improvements to file import script (import.php inside the file import plugin). - 404 web page spelling repair. - Other minor fixes and efficiency enhancements. Release notes: To improve from 2.x, backup, then add the information from /app, /plugins & /themes to your set up. Then apply the database patch in /set up/assets/upgrade_sql_statements/v2.0.1.sql. Then clear your utility cache (through the admin space, web site configuration). See the improve steering within the documentation for extra info.
twentieth August 2020 – v2.0.0 – Core Script Rewrite.
- Support for importing extra information with out reloading the browser. - Complete core rewrite: --- New MVC script framework. --- Separation of enterprise logic (PHP) and views. --- Custom web page url routing. --- Friendly urls all through predominant web site and admin space. --- Twig templating engine - True separation of PHP logic and views. --- Javascript translations moved to exterior JS file fairly than embedded within the web page supply. --- Application cache for elevated efficiency - Routing Cache & Twig Template Cache. --- New MVC construction for each plugins and themes. --- Controllers and templates and be overridden at plugin and theme stage. --- Added help for clear pngs on avatars. --- Friendlier urls on direct file hyperlinks. (elimination of view.php) --- Moved in the direction of object based mostly information updates (ORM). --- New phrases & privateness pages. --- Admin check instruments. - Backblaze cloud file storage help. - New media participant for movies and audio kind information. --- Includes playback pace management, chromecast help and audio visualisation. - Social login plugin improve, together with refreshing steering. - Improved Sharing Functionality: --- Share information aswell as folders now. --- Select a number of information/folders to share without delay, fairly than folder solely stage. --- Admin handle sharing pages. --- Globally shared folders - admin can set folders to be accessed by all accounts. --- Moved shared folders/information into devoted left navigation merchandise. --- Email notification added on inner sharing. - Added choice to set key phrases and outline on information. --- Keywords displayed on file particulars view, linked to look. --- Search characteristic now contains key phrases and outline. - Improvements to drop & drop uploads instantly into file supervisor with out loading the uploader popup. - Site setting choice to make use of native periods fairly than database based mostly periods. - Site settings to regulate min/max size of account usernames. - Site setting to allow obtain tokens to be restricted by IP tackle. - Minor formatting adjustments to file particulars web page, together with including a again button. - Added sharing web page and trash web page hyperlinks on cell view. - Enabled 'enter' key submission on add/edit file/folder popups. - Minor repair to keep away from reloading web page if add completes when viewing file particulars. - Minor repair to script replace notification checker. Release notes: This launch is a significant improve to the codebase. To improve present installs, please see the "Upgrade from v1.x" tab within the /set up/ folder.
eleventh December 2019 – v1.5.2 – Security Improvements And Fixes.
- Fix for distant obtain vulnerability when gopher protocol put in. - Fix for SQLi vulnerability inside admin space datatable scripts. - Fix for XSS in admin 'log file viewer' and 'get all file server paths' script. - Improved uniqueness of password reset hash. Release notes: There are not any database adjustments on this launch. To improve an present set up, merely copy the next information to your set up: /admin/ajax/ - Entire folder /admin/log_file_viewer.php /core/contains/coreFunctions.class.php /core/contains/uploader.class.php /core/contains/userPeer.class.php
twenty ninth May 2018 – v1.5.1 – Minor bug fixes.
- Minor repair to resolve duplicate folders on sharing. - Minor repair to file motion queue processing. Release Notes - There are not any database adjustments on this launch. To improve an present set up, merely copy the next information to your set up: /themes/cloudable/templates/ajax/_load_album.ajax.php /core/contains/fileAction.class.php
1st April 2018 – v1.5 – Direct File Links, PHP7.2 Support, CDN Support, API Changes and plenty of different enhancements.
- Replacement of mcrypt features with OpenSSL for PHP7.2+. - API adjustments - New admin solely endpoints: --- /account/create --- /account/edit --- /account/delete --- /bundle/itemizing - Added non-compulsory CDN help for picture previews and thumbnails. (through file server administration) - Added non-compulsory captcha to person login display. - Added non-compulsory captcha to admin login display. - Big adjustments to how the delete file course of works inside the code: --- All deletes are actually scheduled inside the file motion queue, together with FTP, S3 and Flysystem adapters. --- Better administration of file server paths - saved in opposition to the file server within the admin space. --- Removal of ajax calls to distant storage server on delete, vital efficiency enchancment. - User file supervisor adjustments: --- Added folder ordering. --- Added choose folder choice, help for a number of as per information. --- Added multi folder delete & drag and drop to maneuver. --- Added empty trash button to trash toolbar. --- Hold ctrl+click on to pick out folders. --- Direct file hyperlink choice for all information. - Admin space adjustments: --- Moved "Max File Uploads Per Day" into consideration packages. --- Moved "Accepted Upload File Types" into consideration packages. --- Moved "Blocked Upload File Types" into consideration packages. --- Addedn choice to auto clear trash gadgets older than x days in account packages. - Better suggestions on login failures for the admin space. - Better dealing with of core FTP storage when passive mode is enabled. - Improvements to how the account avatar is loaded to keep away from restrictions on sure servers. - Fix to Amazon S3 storage configuration subject. - File server choice to obtain over totally different protocol in contrast with predominant web site. - Moved the native storage path from _config.inc.php into the file server admin. - All database tables modified to 'InnoDB' & 'utf8mb4_general_ci' to permit for MySQL clustering help. Release Notes: There are database adjustments inside this launch. See /set up/assets/upgrade_sql_statements/v1.4.2 - v1.5.sql.
twenty fourth June 2017 – v1.4
- Core script preliminary help for file storage on: --- SFTP --- Amazon S3 --- Rackspace Cloud Files --- FTP (improved integration, doable future substitute of core FTP storage) - File Upload API: --- Account Operations: Get account data, get account bundle data (max add measurement, account limits and so on). --- File Operations: Upload, Download, Get data, Edit meta information, Delete, Move, Copy. --- Folder Operations: Create, List (Files and Folders), Get data, Edit meta information, Delete, Move. - Admin Area: --- Admin space interface rewrite so it is now utilizing Bootstrap 3. --- Bulk import software. Within the admin space bulk import information into an account from on a folder in your server. --- Added person avatar to handle customers web page. --- Added choice to take away or set avatar on add/edit person. --- Fix so as to add/edit person password setting. Now makes use of the worldwide password guidelines. - Better help for ready arguments within the database layer. - Fix to look widget not at all times displaying the proper file outcomes. - Fix to ordering of information in file supervisor. - Updated social login plugin - Fixed Facebook not working resulting from API adjustments. - Facebook login - eliminated the request for date or beginning, city and about me, in permissions. - Added extra database indexes to enhance efficiency. - Fixed session discover in later variations of PHP - session_write_close(): Failed to write down session information (person). - Fixed SMTP sending points brought on by debug being enabled inside e mail sending library. - Fixed subject with folder zip obtain not being absolutely recursive. Release Notes: There are database adjustments inside this launch. See /set up/assets/upgrade_sql_statements/v1.3.4 - v1.4.sql.
18th January 2017 – v1.3.4
- Update of PHPMailer to repair lately introduced safety subject - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.22
seventeenth November 2016 – v1.3.2
- Minor repair for points with FTP storage server typically not choosing on add. - Minor repair for the default add view after making a folder within the root. NOTE: To apply this patch copy these information to your set up: /core/contains/uploader.class.php /themes/cloudable/templates/ajax/_account_add_edit_folder.course of.ajax.php
2nd November 2016 – v1.3.1
- Minor repair for duplicate folder itemizing on internally shared folders. NOTE: To apply this patch copy this file to your set up: /themes/cloudable/templates/ajax/_load_album.php
14th October 2016 – v1.3
- Internally shared folders. Share any folder with different registered customers and allow them to view, add and obtain information. - Added help for default albums on new account creation/registration. Can be set through the admin, web site settings. - Improvements to statistics logging efficiency and sync between the stats rely and file.visits worth. - Admin Area: --- Added choice to bulk take away information by copying and pasting an inventory of urls. --- Fix so as to add/edit person password setting. Now makes use of the worldwide password guidelines. - Fixed admin space 12 months new information chart. - Improvement to ipToCountry checking for bigger IP ranges. - Better help for ready arguments within the database layer. - Various enhancements and minor bug fixes. NOTE: There are database adjustments on this launch. See installresourcesupgrade_sql_statementsv1.2.3 - v1.3.sql
twenty ninth May 2016 – v1.2.3
- Changed identify of script to uCloud. There are not any code adjustments on this launch.
eleventh April 2016 – v1.2.1
- Fix to subject with sharing on personal folders not working. - Fix to take away use of depreciated perform inside coreFunctions.class.php for PHP7. - Fix to admin add/edit person password setting. Now makes use of the worldwide password guidelines. - Added sql instructions to allow captcha api keys inside web site settings. NOTE: There are database adjustments on this launch. See installresourcesupgrade_sql_statementsv1.2 - v1.2.1.sql
18th March 2016 – v1.2
- PHP7 help. - Login together with your Facebook, Twitter or Google+ Account (non-compulsory setting through admin). - User registration web page and relating admin settings: --- Whether to allow or disable the registration type. --- Whether to show the captcha on the positioning registration type. --- Block e mail tackle domains from registering. Comma separated listing of domains. --- Block usernames from the registration web page. - Automatic language translations through Google Translate API. Translate your complete web site content material to a different language by clicking a button. Note: Requires a Google API key. Menually edited translations will be marked as 'locked' so they are not overwritten. - Added help for username and password protected http & ftp urls. In the format ftp://person:move@host.com/filename.txt. - Improved session dealing with and the way usually the periods are cleared from the database. - Reduced the quantity of knowledge saved in every session for bettter efficiency, from (as much as) 65k to simply over 1k. - Updated IP to Country information and added admin script to replace the information as wanted. (see the highest of /core/contains/ip2Country.class.php) - Improved proper 'subsequent web page' arrow positioning when viewing information. Allows for simpler scrolling of paperwork. - Allowed for information to be dragged into folder icons on the primary view. - Added menu down arrow on folder icons. - Admin Area: --- Added choice in admin to dam the identical file from being re-uploaded. Optional on file take away and automated after elimination on abuse stories. --- Added admin "impersonate person" choice, so admin customers can login as some other person account. --- Added new admin web page for backing up the database and codebase. Functionality additionally inbuilt preparation for automated upgrades at a later date. --- Admin choice to set blocked key phrases inside the filename on file uploads. --- Added choice to quickly disable file uploads globally through the admin space, web site settings. Uploads will nonetheless perform for admin accounts. --- Added choice to quickly disable file downloads globally through the admin space, web site settings. Downloads will nonetheless perform for admin accounts. - Fixed subject with file transfer between exterior file servers. - Various different UI fixes and enhancements. NOTE: There are database adjustments on this launch. See installresourcesupgrade_sql_statementsv1.1 - v1.2.sql
twenty first January 2016 – v1.1
- Added watermarking of photographs by folder choice. Upload a png watermark, set the place and padding. This can then be enabled by folder. Use this to share 'proof' copies of photographs to clients with out giving the person full entry to the picture. - Added an choice to cover or present the obtain button when sharing folders. - Automatic language translations through Google Translate API. Translate your complete web site content material to a different language by clicking a button. Note: Requires a Google API key. - Added admin, theme settings choice so as to add customized CSS code. This is stored between upgrades of the code. - Added admin, theme settings choice to set the brand on the publicly shared pages. - Support for previewing animated gifs. - Added 'obtain all photographs' as zip file choice when folder is shared. - Fix to cover OG picture if file is about as personal or requires a password. - Reduced the utmost measurement of portrait photographs when previewing, higher match for frequent display resolutions. - Improved UI format on cell preview of photographs. - Other minor updates and enhancements. NOTE: There are database adjustments on this launch. See installresourcesupgrade_sql_statementsv1.0 - v1.1.sql
eighth January 2016 – v1.0
- Initial launch.