Skip to content

Security: codersandip/php-media-browser

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
2.0.x
1.0.x

Reporting a Vulnerability

If you discover a security vulnerability, please do the following:

  1. Do NOT open a public issue
  2. Email the details to: [your-email@example.com] (replace with your email)
  3. Include:
    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggested fix (if any)

We will respond within 48 hours and work on a fix as soon as possible.

Security Best Practices

When using PHP Media Browser:

  1. Never expose to public internet without authentication
  2. Set proper file permissions on your server
  3. Use HTTPS in production
  4. Limit accessible directories to only what's necessary
  5. Keep PHP updated to the latest stable version
  6. Review file permissions regularly
  7. Monitor access logs for suspicious activity

Known Security Features

  • Base64 encoding for file paths
  • File type validation
  • POST-only deletions
  • Path traversal protection
  • File existence validation
  • Permission checks

Thank you for helping keep PHP Media Browser secure!

There aren’t any published security advisories