uCloud – 文件托管脚本 – 安全地管理、预览和分享您的文件

uCloud 使自由职业者、小型企业（如媒体机构）和网站管理员能够轻松地在线共享他们的文件。它被构建得非常强大、安全且非常快速！

特征

新增功能 PHP 8.3 支持
新增功能 LiteSpeed支持（以及Apache和Nginx）
新增功能 使用 Google Authenticator 进行 2FA 集成
新增功能 视频、音频、图像和文档嵌入代码
新增功能 代码预览和语法高亮显示
新增功能 核心框架性能改进
上传文件：
- SFTP、FTP、Rackspace 和 Amazon S3 存储。
- BackBlaze 存储支持。
- 与 Wasabi 一起使用本指南.
- 使用您自己的专用服务器存储（直接下载/上传）扩展您的存储。
- 内部共享的文件和文件夹。与其他注册用户共享多个文件和文件夹，并使他们能够查看、上传和下载文件。
- 全局共享选项。
- 具有进度的多文件上传程序。支持 10GB+ 文件大小。
- 上传前预览的图像。上传前为每个文件显示的文件图标。
- 进度百分比、剩余大小、上传速度和剩余时间。
- 后台上传文件。在上传文件时继续管理您的帐户。
- 拖放到浏览器中开始上传。
- 上传后通过电子邮件发送选项。
- 将文件夹 url 复制到剪贴板链接。
- 内置 url 缩短器。
- 支持多个文件服务器。
- 文件详细信息页面，其中包含以下内容：
  - 文件的完整路径。
  - HTML 代码直接复制到网站中。
  - 论坛代码直接复制到论坛中。
  - 用于查看文件的统计信息的链接。
  - 链接以删除文件。
  - 与常见社交媒体网站分享的链接;Facebook、Twitter 等。
  - 通过电子邮件共享的链接。
文件管理器：
- 使用您的 Facebook、Twitter 或 Google 帐户登录（通过管理员进行可选设置）。
- 用户注册页面。
- 新增功能 条款和条件页面。
- 新增功能 隐私政策页面。
- 使用 ajax 构建，因此整个文件管理器快如闪电！
- 为图像和pdf文件生成的缩略图（需要imagemagick）
- 大量文件的文件预览：
  - 图片 – jpg、jpeg、png、gif、wbmp
  - 文件 – doc、docx、xls、xlsx、ppt、pptx、pdf、页面、ai、tiff、dxf、svg、eps、ps、ttf、otf、xps （< 15MB）
  - 视频 – mp4、flv（启用 Flash 时）、ogg
  - 音频 – mp3
- 缓存图像缩略图以加快加载时间。
- 在每个文件和文件夹上的右键菜单选项中快速管理选项。
- 强大的搜索小部件。快速显示与您的搜索匹配的文件和文件夹。
- 高级搜索可按上传日期和文件夹查找文件。
- 需要 account 上传和管理文件。（管理员控制）
- 2 个文件查看选项：
  - 图标视图 – 显示文件缩略图。
  - 列表视图。
- 全屏模式。
- 按文件名、文件大小、上传日期、上次访问和总下载量对文件列表进行排序。
- 更改每页显示的文件数量。
- 将整个文件夹下载为 zip 文件。
- Duplicate file（s）（复制文件）选项。
- 重命名、移动和删除文件选项。
- 按文件夹为图像添加水印选项。上传 png 水印，设置位置和填充。然后可以通过 folder 启用此功能。使用此选项可与客户共享图像的“校样”副本，而无需授予用户对图像的完全访问权限。
文件下载：
- 内置对xSendFile和xAccelRedirect的支持！如果启用，则对服务器性能有重大改进。
- 文件安全地存储在您的 Web 主机上。它们在上传时被重命名，没有扩展名，并放置在无法直接访问的文件夹中。
- 下载是使用安全访问哈希完成的，该哈希在使用后会过期。同一个下载链接不能多次使用。
详细的文件统计信息：
- 每日、每周、每月下载量。
- 推荐网站。
- 访问国家。
- 访问浏览器。
- 访问作系统。
共享：
- 通过Facebook、Twitter、LinkedIn等分享文件和文件夹的链接。
- 如果文件夹设置为私有文件夹，请生成一个唯一的 URL，以使没有帐户的人能够访问它。
- 所有文件和文件夹上都有通过电子邮件发送选项。
- 共享文件夹时隐藏或显示下载按钮的选项。
- 允许或禁用下载共享文件夹中所有文件的选项。
安全：
- 使用 Google Authenticator 的 2FA 支持。
- 使用SHA256和PBKDF2密钥扩展器存储账户密码。
- 设置文件夹和私有或公共。
- 在文件夹上设置密码。
- IP 黑名单 – 阻止 IP 地址使用该网站。
- 支持 https。
- 经过外部测试 XSS 和 SQL 注入攻击。
定制：
- 为 PHP7.3+ 编写。
- 100% 完整的源代码。
- 易于安装。
- 完全可定制。
- 现代模板。（轻松自定义和创建其他）
- 简单、干净、ajax 风格的外观和感觉。
管理区域：
- 使用 Bootstrap 3 重新设计了管理区域。
- 交互式批量导入工具。
- 单独的专用管理区域。
- 详细说明下载和活动文件的仪表板。
- 搜索文件。
- 禁用文件。
- 新增功能 支持多种语言。通过 Google Translation API 自动进行语言翻译。注意：使用他们的 API 可能会产生额外费用。
- 管理用户并按用户文件进行筛选。
- 管理被阻止的 IP。
- 管理站点设置。
- 设置和管理文件服务器。
- 配置为使用特定文件服务器或空间最大的文件服务器。
- 设置模板。
- 设置用户帐户设置：
  - 保留非活动文件的天数。
  - 最大上传文件大小。
  - 和更多。
- 用于设置下载 URL 上的文件名的选项。
- 现代 Ajax 接口。
- 通过管理区域轻松设置徽标、额外的 css 和网站皮肤。
- 通过 Google Translate API 自动进行语言翻译。通过单击按钮将整个站点内容翻译成另一种语言。注意：需要 Google API 密钥。菜单编辑的翻译可以标记为 ‘locked’，这样它们就不会被覆盖。
- 在 admin 中添加了阻止重新上传同一文件的选项。可选的文件删除和滥用报告删除后自动。
- 添加了 admin 的 “impersonate user” 选项，以便 admin 用户可以以任何其他用户帐户的身份登录。
- 添加了用于备份数据库和代码库的新管理页面。还内置了功能，为以后的自动升级做准备。

管理员帐户/区域

您可以通过使用 username 登录来查看 admin area 的 demo：管理和密码：Password@Demo，请注意，在演示站点上禁用删除和编辑等破坏性作，并且管理员帐户将每天重置。

要求

PHP 7.3+，包括 PHP 8.0+
Linux作系统（大多数共享主机上的标准配置）
具有 1 个空数据库的 MySQL 5+
PHP PDO MySQL 扩展
PHP GD & FTP扩展（通常作为标准启用）
带有 Rewrite Module 或 Nginx 的 Apache
支持 HTML5/Javascript 的 Web 浏览器（IE9+、FireFox、Safari、Chrome）

更改历史记录

2024 年 4 月 17 日 – v2.1.2 – 次要更新和修复。

- Replaced usage of deprecated Psr7\stream_for() function call in Backblaze storage

2024 年 2 月 7 日 – v2.1.1 – 次要更新和修复。

- Added download as zip option on publicly shared folders
- Fixed bug on admin language CSV import
- Fixed missing site settings which can trigger exceptions on later PHP versions

Release Notes: There are database changes within this release. See /install/resources/upgrade_sql_statements/v2.1.1.sql - Please review the installation documentation for guidance on how to upgrade.

2022 年 5 月 16 日 – v2.1.0 – PHP 8+ 支持、LiteSpeed 支持、2FA、语法高亮、性能改进等等。

- PHP v8.1 support.
- LiteSpeed webserver support.
--- X-Litespeed-Location improved downloads option on LiteSpeed file servers.
- 2FA integration for site login.
--- New admin site settings option to enable the feature.
--- User can enable/disable 2FA via account settings.
--- Admin area option to reset 2FA by user.
--- User login process updated to prompt for 2FA, if enabled.
--- Admin login has separate prompt for 2FA, if enabled.
--- Social login updated to request 2FA, if enabled.
- File Previewer Plugin:
--- Support for previewing text based files. Including syntax highlighting on code such as JS, CSS, HTML and PHP.
--- Added support for ImageMagick image file types - AI, PSD, Animated GIF and 100's more.
--- Added support for resized animated GIF images when using ImageMagick.
--- Added global image watermark option.
--- Added image embed html code option.
--- Added background image thumbnail creator script.
--- Added document embed html code option.
--- Added option to autoplay videos (browser support dependant).
--- Added video embed html code option.
--- Added option to autoplay audio files (browser support dependant).
--- Added audio embed html code option.
--- Improvement to the document viewer so it continues to work even when downloads are locked down by IP address.
- Performance improvements:
--- Improved core framework load times by reducing database queries on each load.
--- Removed IP ban for 'Whole Site' option to improve core load times. These should be managed via your web server going forward.
--- Additional database indexes based on queries within the core framework.
--- Moved caching of used server storage space value into cron task, rather than each file upload.
--- Improved memory usage on banned ip data purge.
--- Performance improvement to md5 hash generation for large files.
- Added cancel upload option within file manager. Options to cancel any pending file or the entire upload.
- Added extra OpenGraph headers for links shared via Facebook.
- Geo-targeting for file servers. Direct traffic from countries to specific storage servers.
- Upgraded core GeoIP library to use GeoLite2 by Maxmind. IP database updated to the latest.
- Removed local server fallback when no storage servers available on upload. The user now sees an error message and uploading is blocked.
- Better error responses on failed/blocked uploads.
- Added download count to file manager file listing view.
- Limit upload speed by account package using Nginx. You can now set an "Upload Url Slug" via the account package settings. When using Nginx, you can configure this to be speed limited.
- Limit concurrent downloads better in Nginx. You can now set a "Download Url Slug" via the account package settings. On Nginx this can be configured to limit connections or download speed.
- Fixed issue with zipping files when downloads are locked down by IP address.
- Added site settings to disable chunked uploads and the chunked upload file size. (recommend for advanced setups only)
- Added admin option to enable concurrent uploads to improve upload performance.
- Added admin option to set how many concurrent uploads to process at the same time.
- Admin option to purge application cache on file servers aswell as the main local server.
- Admin area site setting option to disable md5 file hashing over certain file sizes. Resolves md5_file() performance issues on low resource hosts.
- Added reason for file removal on delete. For example, admin/user removed, copyright claim or system expired. Shown when trying to access the download url.
- Added UID to each log session to simplify reviewing log history.
- Ensured all "direct" file servers route file urls via the main site url.
- Fixed issue where file preview cache files sometimes not being scheduled for removal within the file action queue.
- Added fileHash and whether a file is a duplicate on admin, edit file popup.
- Added option in file preview settings to not show the details page when not logged in. i.e. file urls will trigger a download.
- Improved system logging within the upload process.
- Added support for SSH keys aswell as passwords, in file server SSH connection details.
- Updated token download urls for media so they always include the filename, for third party player compatibility.
- Added catch in core database class for "SQLSTATE[HY000]: General error: 2006 MySQL server has gone away" errors. Attempts to reconnect rather than exiting.
- Fix to video playback on Safari when not using XSendFile or XAccelRedirect.
- Fix to enforce UTF8 character encoding on email sending.
- Fixed issue which caused some cache files to not be queued for deletion on 'direct' file servers.
- Fixed issue with admin area delete user function, which sometimes caused uploaded files not to be removed.
- Fixed double icon issue when file preview "Show Thumbnails" option disabled.
- Fixed issue with erroneous HTML being output on uploader when file previewer plugin disabled.
- Fixed issue with "download as zip" to ensure the zip file name on the server is always unique.
- Resolved issue with crypto functions where data sometimes fails to encrypt fully.
- Improvements to ipv6 validation and login logs.
- Ensured folderHash is set on folder creation within the file import plugin.

Release Notes: There are database changes within this release. See /install/resources/upgrade_sql_statements/v2.1.0.sql - Please review the installation documentation for guidance on how to upgrade.

2021 年 2 月 9 日 – v2.0.2 – 安全修复。

- Fix to Server-Side Request Forgery on remote url download.

Release notes: To apply the update from v2.0.1, simply upload the following files to your install:

/app/services/Uploader.class.php
/app/core/Framework.class.php

2020 年 8 月 27 日 – v2.0.1 – 小修复和改进。

- Added file manager actions buttons to mobile view.
- Added option on public sharing page to download all share as zip or just the current folder.
- Significant performance improvements on download as zip feature.
- Increased max supported filesize on the document viewer to 50MB (from 10MB).
- Better fallback handling if file is greater than 50MB on document viewer.
- Moved script version number into /app/core/Framework.class.php.
- Minor fix to folder paging when no files.
- Minor fix to edit file, folder dropdown not always listing all folders.
- Minor improvement to JS translation function.
- Minor fix to empty trash function.
- Captcha code output fix, due to the way Twig handles HTML they were not always rendered as expected.
- Minor fix to add user account type admin function.
- Removal of various PHP notices.
- Minor fix to auto scan of any newly added themes. Previously this was not automatically showing in admin.
- Improvements to file import script (import.php within the file import plugin).
- 404 page spelling fix.
- Other minor fixes and performance improvements.

Release notes: To upgrade from 2.x, backup, then upload the files from /app, /plugins & /themes to your
install. Then apply the database patch in /install/resources/upgrade_sql_statements/v2.0.1.sql.
Then clear your application cache (via the admin area, site configuration). See the upgrade
guidance in the documentation for more information.

2020 年 8 月 20 日 – v2.0.0 – Core Script 重写。

- Support for uploading additional files without reloading the browser.
- Complete core rewrite:
--- New MVC script framework.
--- Separation of business logic (PHP) and views.
--- Custom page url routing.
--- Friendly urls throughout main site and admin area.
--- Twig templating engine - True separation of PHP logic and views.
--- Javascript translations moved to external JS file rather than embedded in the page source.
--- Application cache for increased performance - Routing Cache & Twig Template Cache.
--- New MVC structure for both plugins and themes.
--- Controllers and templates and be overridden at plugin and theme level.
--- Added support for transparent pngs on avatars.
--- Friendlier urls on direct file links. (removal of view.php)
--- Moved towards object based data updates (ORM).
--- New terms & privacy pages.
--- Admin test tools.
- Backblaze cloud file storage support.
- New media player for videos and audio type files.
--- Includes playback speed control, chromecast support and audio visualisation.
- Social login plugin upgrade, including refreshing guidance.
- Improved Sharing Functionality:
--- Share files aswell as folders now.
--- Select multiple files/folders to share at once, rather than folder only level.
--- Admin manage sharing pages.
--- Globally shared folders - admin can set folders to be accessed by all accounts.
--- Moved shared folders/files into dedicated left navigation item.
--- Email notification added on internal sharing.
- Added option to set keywords and description on files.
--- Keywords displayed on file details view, linked to search.
--- Search feature now includes keywords and description.
- Improvements to drop & drop uploads directly into file manager without loading the uploader popup.
- Site setting option to use local sessions rather than database based sessions.
- Site settings to control min/max length of account usernames.
- Site setting to enable download tokens to be limited by IP address.
- Minor formatting changes to file details page, including adding a back button.
- Added sharing page and trash page links on mobile view.
- Enabled 'enter' key submission on add/edit file/folder popups.
- Minor fix to avoid reloading page if upload completes when viewing file details.
- Minor fix to script update notification checker.

Release notes: This release is a major upgrade to the codebase. To upgrade existing installs,
please see the "Upgrade from v1.x" tab in the /install/ folder.

2019 年 12 月 11 日 – v1.5.2 – 安全改进和修复。

- Fix for remote download vulnerability when gopher protocol installed.
- Fix for SQLi vulnerability within admin area datatable scripts.
- Fix for XSS in admin 'log file viewer' and 'get all file server paths' script.
- Improved uniqueness of password reset hash.

Release notes: There are no database changes in this release. To upgrade an existing install,
simply copy the following files to your installation:

/admin/ajax/ - Entire folder
/admin/log_file_viewer.php
/core/includes/coreFunctions.class.php
/core/includes/uploader.class.php
/core/includes/userPeer.class.php

2018 年 5 月 29 日 – v1.5.1 – 小错误修复。

- Minor fix to resolve duplicate folders on sharing.
- Minor fix to file action queue processing.

Release Notes - There are no database changes in this release. To upgrade an existing install,
simply copy the following files to your installation:

/themes/cloudable/templates/ajax/_load_album.ajax.php
/core/includes/fileAction.class.php

2018 年 4 月 1 日 – v1.5 – 直接文件链接、PHP7.2 支持、CDN 支持、API 更改和许多其他改进。

- Replacement of mcrypt functions with OpenSSL for PHP7.2+.
- API changes - New admin only endpoints:
--- /account/create
--- /account/edit
--- /account/delete
--- /package/listing
- Added optional CDN support for image previews and thumbnails. (via file server management)
- Added optional captcha to user login screen.
- Added optional captcha to admin login screen.
- Big changes to how the delete file process works within the code:
--- All deletes are now scheduled within the file action queue, including FTP, S3 and Flysystem adapters.
--- Better management of file server paths - stored against the file server in the admin area.
--- Removal of ajax calls to remote storage server on delete, significant performance improvement.
- User file manager changes:
--- Added folder ordering.
--- Added select folder option, support for multiple as per files.
--- Added multi folder delete & drag and drop to move.
--- Added empty trash button to trash toolbar.
--- Hold ctrl+click to select folders.
--- Direct file link option for all files.
- Admin area changes:
--- Moved "Max File Uploads Per Day" into account packages.
--- Moved "Accepted Upload File Types" into account packages.
--- Moved "Blocked Upload File Types" into account packages.
--- Addedn option to auto clear trash items older than x days in account packages.
- Better feedback on login failures for the admin area.
- Better handling of core FTP storage when passive mode is enabled.
- Improvements to how the account avatar is loaded to avoid restrictions on certain servers.
- Fix to Amazon S3 storage configuration issue.
- File server option to download over different protocol compared with main site.
- Moved the local storage path from _config.inc.php into the file server admin.
- All database tables changed to 'InnoDB' & 'utf8mb4_general_ci' to allow for MySQL clustering support.

Release Notes: There are database changes within this release. See /install/resources/upgrade_sql_statements/v1.4.2 - v1.5.sql.

2017 年 6 月 24 日 – v1.4

- Core script initial support for file storage on:
--- SFTP
--- Amazon S3
--- Rackspace Cloud Files
--- FTP (improved integration, possible future replacement of core FTP storage)
- File Upload API:
--- Account Operations: Get account info, get account package info (max upload size, account limits etc).
--- File Operations: Upload, Download, Get info, Edit meta data, Delete, Move, Copy.
--- Folder Operations: Create, List (Files and Folders), Get info, Edit meta data, Delete, Move.
- Admin Area:
--- Admin area interface rewrite so it's now using Bootstrap 3.
--- Bulk import tool. Within the admin area bulk import files into an account from on a folder on your server.
--- Added user avatar to manage users page.
--- Added option to remove or set avatar on add/edit user.
--- Fix to add/edit user password setting. Now uses the global password rules.
- Better support for prepared arguments in the database layer.
- Fix to search widget not always displaying the correct file results.
- Fix to ordering of files in file manager.
- Updated social login plugin - Fixed Facebook not working due to API changes.
- Facebook login - removed the request for date or birth, town and about me, in permissions.
- Added additional database indexes to improve performance.
- Fixed session notice in later versions of PHP - session_write_close(): Failed to write session data (user).
- Fixed SMTP sending issues caused by debug being enabled within email sending library.
- Fixed issue with folder zip download not being fully recursive.
Release Notes: There are database changes within this release. See /install/resources/upgrade_sql_statements/v1.3.4 - v1.4.sql.

2017 年 1 月 18 日 – v1.3.4

- Update of PHPMailer to fix recently announced security issue - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.22

2016 年 11 月 17 日 – v1.3.2

- Minor fix for issues with FTP storage server sometimes not selecting on upload.
- Minor fix for the default upload view after creating a folder in the root.

NOTE: To apply this patch copy these files to your install:
/core/includes/uploader.class.php
/themes/cloudable/templates/ajax/_account_add_edit_folder.process.ajax.php

2016 年 11 月 2 日 – v1.3.1

- Minor fix for duplicate folder listing on internally shared folders.
NOTE: To apply this patch copy this file to your install: /themes/cloudable/templates/ajax/_load_album.php

2016 年 10 月 14 日 – v1.3

- Internally shared folders. Share any folder with other registered users and enable them to view, upload and download files.
- Added support for default albums on new account creation/registration. Can be set via the admin, site settings.
- Improvements to stats logging performance and sync between the stats count and file.visits value.
- Admin Area:
--- Added option to bulk remove files by copying and pasting a list of urls.
--- Fix to add/edit user password setting. Now uses the global password rules.
- Fixed admin area 12 months new files chart.
- Improvement to ipToCountry checking for larger IP ranges.
- Better support for prepared arguments in the database layer.
- Various improvements and minor bug fixes.
NOTE: There are database changes in this release. See \install\resources\upgrade_sql_statements\v1.2.3 - v1.3.sql

2016 年 5 月 29 日 – v1.2.3

- Changed name of script to uCloud. There are no code changes in this release.

2016 年 4 月 11 日 – v1.2.1

- Fix to issue with sharing on private folders not working.
- Fix to remove use of depreciated function within coreFunctions.class.php for PHP7.
- Fix to admin add/edit user password setting. Now uses the global password rules.
- Added sql commands to enable captcha api keys within site settings.
NOTE: There are database changes in this release. See \install\resources\upgrade_sql_statements\v1.2 - v1.2.1.sql

2016 年 3 月 18 日 – v1.2

- PHP7 support.
- Login with your Facebook, Twitter or Google+ Account (optional setting via admin).
- User registration page and relating admin settings:
--- Whether to enable or disable the registration form.
--- Whether to display the captcha on the site registration form.
--- Block email address domains from registering. Comma separated list of domains.
--- Block usernames from the registration page.
- Automatic language translations via Google Translate API. Translate the entire site content to another language by clicking a button. Note: Requires a Google API key. Menually edited translations can be marked as 'locked' so they're not overwritten.
- Added support for username and password protected http & ftp urls. In the format ftp://user:pass@host.com/filename.txt.
- Improved session handling and how regularly the sessions are cleared from the database.
- Reduced the amount of data stored in each session for bettter performance, from (up to) 65k to just over 1k.
- Updated IP to Country data and added admin script to update the data as needed. (see the top of /core/includes/ip2Country.class.php)
- Improved right 'next page' arrow positioning when viewing files. Allows for easier scrolling of documents.
- Allowed for files to be dragged into folder icons on the main view.
- Added menu down arrow on folder icons.
- Admin Area:
--- Added option in admin to block the same file from being re-uploaded. Optional on file remove and automatic after removal on abuse reports.
--- Added admin "impersonate user" option, so admin users can login as any other user account.
--- Added new admin page for backing up the database and codebase. Functionality also built in preparation for automatic upgrades at a later date.
--- Admin option to set blocked keywords within the filename on file uploads.
--- Added option to temporarily disable file uploads globally via the admin area, site settings. Uploads will still function for admin accounts.
--- Added option to temporarily disable file downloads globally via the admin area, site settings. Downloads will still function for admin accounts.
- Fixed issue with file move between external file servers.
- Various other UI fixes and improvements.
NOTE: There are database changes in this release. See \install\resources\upgrade_sql_statements\v1.1 - v1.2.sql

2016 年 1 月 21 日 – v1.1

- Added watermarking of images by folder option. Upload a png watermark, set the position and padding. This can then be enabled by folder. Use this to share 'proof' copies of images to customers without giving the user full access to the image.
- Added an option to hide or show the download button when sharing folders.
- Automatic language translations via Google Translate API. Translate the entire site content to another language by clicking a button. Note: Requires a Google API key.
- Added admin, theme settings option to add custom CSS code. This is kept between upgrades of the code.
- Added admin, theme settings option to set the logo on the publicly shared pages.
- Support for previewing animated gifs.
- Added 'download all images' as zip file option when folder is shared.
- Fix to hide OG image if file is set as private or requires a password.
- Reduced the maximum size of portrait images when previewing, better fit for common screen resolutions.
- Improved UI layout on mobile preview of images.
- Other minor updates and improvements.
NOTE: There are database changes in this release. See \install\resources\upgrade_sql_statements\v1.0 - v1.1.sql

2016 年 1 月 8 日 – v1.0

- Initial release.

特征

管理员帐户/区域

要求

更改历史记录

相关独立站主题