Anibas File Manager

A full-featured, secure, and modern file manager for WordPress. Manage local files and cloud storage, edit code, preview media, create archives, browse guarded database tables, and run site backups directly from your WordPress dashboard.

Version: 1.3.0
Author: Diwakar Dahal
License: GPL-2.0+
Requires: WordPress 6.0+, PHP 8.0+

---

🚀 Installation

1. Download the latest release .zip file from the Releases page.
2. Log into your WordPress dashboard and navigate to Plugins > Add New.
3. Click Upload Plugin and select the .zip file.
4. Click Install Now, then Activate.
5. Navigate to the new File Manager menu in your dashboard to get started!

---

✨ Features

What's New in 1.3.0

• Full-site restore: Restore ANFM backups with staged file/database restore, preserve-old-data choices, fallback handling, and guarded critical stages.
• Searchable backup inspection: Scan large ANFM backups in chunks, browse them as a tree, search contents, and download individual files.
• Cloud backup flow: Send full-site backups to cloud storage and import remote ANFM backups into local backup storage before restore.
• Database polish: Saved table/page state, safer add-row defaults, smoother password recovery, explicit redaction, and no destructive row-delete UI.
• Remote reliability: Live availability checks, disabled offline destinations, SFTP fallback fixes, and safer binary/cloud transfers.
• Security and timeout hardening: Validated upload sessions, fail-closed encrypted credential saves, server-side editor checks, raw JSON preservation, and streamed archive/database manifests.

What's New in 1.1.0

• New cloud providers: Google Drive, OneDrive, and Dropbox support with OAuth connection flows.
• Smarter settings: Remote storage settings are now generated from a backend provider manifest, so new providers share the same settings and validation flow.
• Large-folder resilience: Remote listings, archive scans, delete jobs, and backup flows were hardened for paginated/cloud directories and long-running operations.
• Backup organization: Backup files now have a dedicated Settings -> Backups page, while backup creation remains under Settings -> General.
• Security hardening: Storage-bound delete tokens, safer trash password handling, protected backup state files, and stricter remote path confinement.

📁 Advanced File & Folder Operations

• Intuitive UI: Browse files with an expandable sidebar tree and paginated list/grid views.
• Full Control: Create, rename, duplicate, copy, move, and delete files or folders.
• Conflict Resolution: Seamlessly handle file conflicts during transfers (skip, overwrite, or auto-rename).
• Rich Previews: Preview images, videos, audio, PDFs, and text files inline.
• Cross-Storage Transfers: Move files between local storage and a remote backend using the "Send To" modal. Direct remote-to-remote transfers are blocked for safety.
• Remote Pagination: Large remote folders are paginated in the UI and scanned incrementally by background jobs.

🗑️ Smart Trash System

• Soft Delete: Items are moved to a .trash directory instead of being permanently deleted.
• Accurate Restoration: Index-based tracking preserves original paths, ensuring items are restored exactly where they belong.
• Auto-Cleanup: WP-Cron automatically purges old trash items (default: 30 days).

📝 Built-in Code Editor (CodeMirror 6)

• Syntax Highlighting: Support for PHP, JS, TS, CSS, HTML, JSON, YAML, SQL, Python, Rust, C/C++, and more.
• Large File Support: Edits are streamed in chunks, safely supporting files up to 10 MB.
• Security: Token-based editor sessions expire automatically after 2 hours.
• Dot-Files: Full support for editing .htaccess, .env, and other hidden configuration files.

🗃️ Database Browser

• Explicit Opt-in: Database browsing is disabled by default and only appears after ANIBAS_FM_ENABLE_DATABASE_VIEW is enabled in wp-config.php and then enabled in Settings.
• Scoped Browsing: Browse the current site's tables, plus network/global tables on multisite when the admin has network permissions.
• Schema & Index Views: Inspect table columns, primary keys, generated/binary fields, indexes, row estimates, storage engine, and collation.
• Numbered Pagination: Database rows use bounded numbered paging with jump-to-page controls instead of loading large tables in one request.
• Controlled Editing: Optional row editing requires ANIBAS_FM_ENABLE_DATABASE_EDIT, a Settings toggle, database nonces, and valid primary keys.
• Metadata-aware Inserts: Add-row forms use SQL defaults where available and sensible date/time or numeric defaults for common column types.
• Sensitive Data Protection: user_pass and WordPress-critical option/site-meta values such as site URLs, cron state, and rewrite rules are explicitly redacted and cannot be edited from the table view.

🗜️ Archive & Backup Management

• Archives: Create and extract ZIP, TAR, and custom ANFM archives directly in the browser.
• Resumable Archive Jobs: Archive creation and extraction run in bounded steps, with status tracking and resume/cancel controls for interrupted work.
• Site Backups: Generate and restore database + file full-site backups as ANFM packages with phase-based execution, optional password protection, streaming encrypted manifests, and header/footer completeness checks.
• Runtime Preflight: Backup and restore check conservative PHP memory headroom and disk availability before starting. If disk space cannot be determined, the operation reports that to the admin instead of assuming it is safe.
• File Backups: Maintain a rolling backup history for individual files (default: 5 snapshots per file).
• Dedicated Backup Browser: View, restore, and delete file backups from Settings -> Backups. Full-site backups can be inspected, searched, sent to cloud storage, imported from cloud storage, restored, or deleted. Full-site restore remains hidden until explicitly enabled.
• Cloud Restore Path: Remote full-site ANFM backups can be imported into local backup storage before restore.
• Protected Storage: Backup files are stored in a hidden, protected directory under wp-content/.anibas-backups-{random} and are excluded from normal file-manager browsing.

☁️ Multi-Storage Backends

Switch between storage providers natively without leaving the WordPress dashboard:

• Local: Direct WP_Filesystem operations.
• FTP/FTPS: cURL-based, active & passive modes.
• SFTP: SSH-powered via phpseclib + cURL fallback.
• Amazon S3: Native S3 client with paginated listing, multipart upload, and chunked worker operations.
• S3-Compatible: Connect to DigitalOcean Spaces, Wasabi, MinIO, Cloudflare R2, or other S3-compatible providers.
• Google Drive: OAuth-backed browsing, upload, download, preview, and transfer support.
• OneDrive: OAuth-backed Microsoft Graph storage support.
• Dropbox: OAuth-backed Dropbox storage support, including folder traversal and upload sessions.
• Live Availability: Settings and storage pickers show whether each remote connection is currently reachable, dim offline providers, and block sending files to unavailable destinations.

🚀 Chunked Uploads

• Reliable Uploads: Large files are uploaded in chunks (1–20 MB) with background assembly.
• Validated Sessions: Upload chunks are checked against server-issued session metadata before assembly.
• Cloud Integration: Remote uploads use provider-aware chunking/multipart sessions for S3, Google Drive, OneDrive, and Dropbox where supported.
• Empty File Support: Zero-byte files are handled consistently across local and remote storage.

⚙️ Asynchronous Background Processing

• Non-blocking Operations: Heavy tasks (large folder copies, remote syncs) run as queueable background jobs.
• Phase-based Execution: Operations are split into conservative, time-bounded phases (Init → List → Transfer → Wrap-up). PHP max_execution_time can only reduce the internal budget, never increase it.
• Real-time Progress: Monitor job status and progress directly from the UI.
• Queued Delete & Empty Folder: Large delete, move-to-trash, and empty-folder operations are processed in bounded queue slices instead of one long request.
• Bounded Memory Reads: Internal metadata reads are capped, archive manifests are streamed, and large file/chunk operations use fread/streaming paths instead of full-file reads.
• Worker Dispatch: Upload assembly and background operations dispatch workers immediately, so jobs do not depend on a later status poll to begin.

🛡️ Security

• Strict Capabilities: manage_options check on all operations.
• Nonces & Tokens: Action-specific WordPress nonces, file-manager/session tokens, settings tokens, and storage-bound one-time delete tokens.
• Path Protection: Multi-layer validation prevents directory traversal. Hardcoded blocked paths protect critical WP files (wp-config.php, .git, etc.).
• Remote Boundaries: FTP, SFTP, S3-compatible, Google Drive, OneDrive, and Dropbox requests stay confined to their configured base path/root.
• Password Gates: Optional master password, settings lock, and delete-confirmation checks with brute-force lockout.
• Database Safeguards: Optional database password sessions, explicit database enable constants, scoped table access, protected columns, and blocked user/usermeta deletion.
• Encrypted Credentials: Remote connection secrets and OAuth tokens are encrypted at rest with AES-256-GCM.

---

Release Notes

1.3.0

• Added opt-in full-site restore with staged file/database restore, preserve-old-data choices, critical-stage cancellation rules, and overwrite fallback when staging cannot continue.
• Added searchable ANFM backup inspection with chunked indexing, tree browsing, search, and single-file downloads.
• Added cloud backup send/import flows, including remote full-site backup detection and import into local backup storage before restore.
• Improved database tools with saved table/page state, safer add-row defaults, password-expiry recovery, explicit redaction, and no destructive row-delete UI.
• Hardened backup, archive, and database streams with ANFM header/footer validation, JSONL manifests, conservative memory/disk preflight, and URL rewriting during restore.
• Hardened AJAX and security paths for raw JSON values, encrypted credential saves, editor permissions, storage-bound tokens, and upload-session validation.
• Improved remote storage reliability with live availability checks, disabled offline destinations, SFTP fallback/binary-upload fixes, bounded previews/downloads, and clearer cloud status.
• Added reusable custom dialogs for sensitive backup/restore/send flows and cleaned up PHP 8 typing/WPCS handling.

1.2.0

• Added the guarded Database tab with scoped table access, schema/index inspection, numbered pagination, and optional cell editing/add-row controls.
• Added protected ANFM full-site backup creation with database payloads, encrypted manifests, and hidden backup storage.
• Improved large-operation queues for remote pagination, archives, delete/empty-folder, upload assembly, and zero-byte files.
• Hardened delete/trash tokens, archive restore state storage, remote path confinement, and backup browsing.

1.1.0

• Added Google Drive, OneDrive, and Dropbox storage providers with OAuth connection, refresh, and disconnect flows.
• Added generated remote-storage settings forms backed by the PHP provider manifest.
• Improved remote pagination, cloud uploads, streaming previews/downloads, and zero-byte file handling across adapters.
• Hardened background jobs for large copy/move/delete/empty-folder/archive/backup/upload-assembly flows.
• Added the dedicated Settings -> Backups page for file backup history and full-site backup archives.
• Strengthened delete/trash/auth token handling, archive restore state storage, and remote path containment.

1.0.0

• Initial public release.

---

🛠️ Developer Guide

Architecture Overview

Backend (PHP)

engine/
├── adapters/                Storage adapter implementations
├── core/                    AJAX handlers & bootstrap
├── database/                Database browser, pagination & safety policy
├── handlers/                Background job queue & worker
├── operations/              Time-bounded phase executors
├── partials/                Admin page templates
└── utilities/               Activity loggers & connection testers

Frontend (Svelte 5 + TypeScript + Vite)

src/
├── main.ts                  App entry point
├── settings.ts              Settings page entry point
├── stores/                  Global state (Svelte 5 runes)
├── services/                AJAX communication layer
├── components/              UI Components (Sidebar, Explorer, Editor, Database, Settings)
└── utils/                   Uploader, icons, i18n

Build & Development

Requirements: Node.js 18+, npm 9+, PHP 8.0+, WordPress 6.0+

npm install        # Install frontend dependencies
npm run watch      # Development — watches both app & settings groups
npm run check      # Svelte and TypeScript validation
npm run build      # Production build → dist/

The Vite build uses entry groups (app and settings) to control code splitting for optimal WordPress enqueueing.

Configuration Constants

You can define these in wp-config.php before WordPress loads the plugin. These are the supported user-facing constants; AJAX action constants are internal and should not be overridden.

// Rate limiting & Uploads
define('ANIBAS_FM_OPERATION_DELAY', 2);
define('ANIBAS_FM_LOCK_DURATION', 15);
define('ANIBAS_FM_CHUNK_SIZE_MIN', 1 * 1024 * 1024);
define('ANIBAS_FM_DEFAULT_CHUNK_SIZE', 10 * 1024 * 1024);
define('ANIBAS_FM_CHUNK_SIZE_MAX', 20 * 1024 * 1024);
define('ANIBAS_FM_UPLOAD_TOKEN_EXPIRY', 15 * MINUTE_IN_SECONDS);

// Listing, Trash & Backups
define('ANIBAS_FILE_MANAGER_DEFAULT_FILELIST_PAGE_SIZE', 100);
define('ANIBAS_FM_TRASH_MAX_AGE', 30 * DAY_IN_SECONDS);
define('ANIBAS_FM_BACKUP_MAX_AGE', 7 * DAY_IN_SECONDS);
define('ANIBAS_FM_FILE_BACKUP_KEEP', 5);

// Editor
define('ANIBAS_FM_EDITOR_MAX_BYTES', 10 * 1024 * 1024);

// Database browser and editor (disabled by default)
define('ANIBAS_FM_ENABLE_DATABASE_VIEW', true);
define('ANIBAS_FM_ENABLE_DATABASE_EDIT', true);
define('ANIBAS_FM_DATABASE_TOKEN_TTL', HOUR_IN_SECONDS);

// Full-site restore gate (disabled by default; backup creation remains available)
define('ANIBAS_FM_ENABLE_SITE_RESTORE', true);

// OAuth cloud app credentials
define('ANIBAS_FM_GOOGLE_DRIVE_CLIENT_ID', '...');
define('ANIBAS_FM_GOOGLE_DRIVE_CLIENT_SECRET', '...');
define('ANIBAS_FM_ONEDRIVE_CLIENT_ID', '...');
define('ANIBAS_FM_ONEDRIVE_CLIENT_SECRET', '...');
define('ANIBAS_FM_ONEDRIVE_TENANT', 'common');
define('ANIBAS_FM_DROPBOX_APP_KEY', '...');
define('ANIBAS_FM_OAUTH_REFRESH_WINDOW', 10 * MINUTE_IN_SECONDS);

ANIBAS_FM_ENABLE_DATABASE_VIEW only reveals the Database tab after the matching Settings toggle is also enabled. ANIBAS_FM_ENABLE_DATABASE_EDIT likewise requires the Database edit Settings toggle. The older lowercase aliases anibas_enable_database_view and anibas_enable_database_edit are accepted for compatibility, but the uppercase constants above are preferred.

AJAX Actions & Settings Storage

Refer to the source code for a comprehensive list of registered AJAX endpoints (engine/core/ajax/).

Plugin data is stored securely:

• Settings: Stored in the AnibasFileManagerOptions WP option.
• Credentials: Remote connections (anibas_fm_remote_connections) are encrypted using AES-256-GCM.
• Job Queues: Stored in WP options, while active operation locks use short-lived Transients.
• Activity Logs: Written to protected directories within wp-content/.

---

📄 License

GPL-2.0+ — See LICENSE.txt for details.

🔗 Links

• Plugin site: diwakar2000.com.np/anibas-file-manager
• Author: Diwakar Dahal