| Version | Supported |
|---|---|
| 2.0.x | ✅ |
| 1.0.x | ❌ |
If you discover a security vulnerability, please do the following:
- Do NOT open a public issue
- Email the details to: [your-email@example.com] (replace with your email)
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
We will respond within 48 hours and work on a fix as soon as possible.
When using PHP Media Browser:
- Never expose to public internet without authentication
- Set proper file permissions on your server
- Use HTTPS in production
- Limit accessible directories to only what's necessary
- Keep PHP updated to the latest stable version
- Review file permissions regularly
- Monitor access logs for suspicious activity
- Base64 encoding for file paths
- File type validation
- POST-only deletions
- Path traversal protection
- File existence validation
- Permission checks
Thank you for helping keep PHP Media Browser secure!